CVE-2016-9777 in Linux Kernel
摘要 (英语)
KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service (out-of-bounds array access and host OS crash) via a crafted interrupt request, related to arch/x86/kvm/ioapic.c and arch/x86/kvm/ioapic.h.
预定
2016-12-02
披露
2016-12-28
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 94700 | Linux Kernel KVM 信息公开 | 125 | 未定义 | 官方修复 | CVE-2016-9777 |