Read the docs
Red Hat Security Advisory

RHSA-2013:0727

kvm security update

Released 2013-04-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2013-01583 CVE-2013-1797 · GHSA-3fq7-5q53-mpg7

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4…

Priority LOW 32

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted…

CVSS 2.0MEDIUM 6.8 Adjacent network No auth Interaction — EPSS 0.00894 Published 2013-03-22 Partial fix CWE-399
TI-2013-01582 CVE-2013-1796 · GHSA-xr82-v4c6-wp6r

The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4…

Priority LOW 32

The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denia…

CVSS 2.0MEDIUM 6.8 Adjacent network No auth Interaction — EPSS 0.00946 Published 2013-03-22 Partial fix CWE-119
TI-2013-01584 CVE-2013-1798 · GHSA-2r7v-v86r-776v

The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4…

Priority LOW 30

The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS…

CVSS 2.0MEDIUM 6.2 Adjacent network No auth Interaction — EPSS 0.0135 Published 2013-03-22 Partial fix CWE-20