CVE-2013-0311

kernel: vhost: fix length for cross region descriptor

Published Feb 22, 2013 CVSS 2.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Description
The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2013-0329 The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
Ubuntu USN Ubuntu USN USN-1756-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1760-1 Linux kernel (Oneiric backport) vulnerabilities
Ubuntu USN Ubuntu USN USN-1767-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1768-1 Linux kernel (Quantal HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-1769-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-1774-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1778-1 Linux kernel (OMAP4) vulnerabilities
Ubuntu USN Ubuntu USN USN-1781-1 Linux kernel (OMAP4) vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 2:25 PM
Reserved
Dec 6, 2012, 12:00 AM
Status
Modified
Published
Feb 22, 2013, 12:55 AM
Modified
Jun 16, 2026, 11:49 PM
Severity
Important
Public date
Feb 19, 2013, 12:00 AM