Description
The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://rhn.redhat.com/errata/RHSA-2013-0496.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html ↗
- https://github.com/torvalds/linux/commit/bd97120fc3d1a11f3124c7c9ba1d91f51829eb85 ↗
- http://rhn.redhat.com/errata/RHSA-2013-0882.html ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 ↗
- http://rhn.redhat.com/errata/RHSA-2013-0928.html ↗
- http://www.openwall.com/lists/oss-security/2013/02/20/6 ↗
- http://rhn.redhat.com/errata/RHSA-2013-0579.html ↗
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bd97120fc3d1a11f3124c7c9ba1d91f51829eb85 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=912905 ↗
- http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.7.bz2 ↗