NetSight
IP …
medium6.8

CVE-2013-1797

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corrupt…

Impact

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 3.8.4
Versions 3.8.0, 3.8.1, 3.8.2, 3.8.3

Weakness classification

CWE-399

References