Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service (out-of-bounds array access and host OS crash) via a crafted interrupt request, related to arch/x86/kvm/ioapic.c and arch/x86/kvm/ioapic.h.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux kernel 安全漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。KVM（Kernel-based Virtual Machine，基于内核的虚拟机）是用于其中的一种虚拟化基础设施。 Linux kernel 4.8.11及之前的版本中的KVM存在安全漏洞，该漏洞源于程序启用I/O APIC时，没有正确的限制VCPU索引。虚拟机操作系统上的攻击者可通过发送特制的中断请求利用该漏洞获取主机操作系统的权限或造成拒绝服
CVSS Information
N/A
Vulnerability Type
N/A