VULNERABILITY INTELLIGENCE
CVE-2013-6368
CVSS score6.2 MEDIUM
EPSS probability0.61%
CISA KEVNot currently listed
Published2013-12-14
Last modified2026-06-17
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C
Description
The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.
Weakness classification
- CWE-20: Improper Input Validation