CVE-2013-1797

Vulnerabilidad después de liberación en arch/x86/kvm/x86.c en el kernel de Linux hasta v3.8.4 permite a los clientes usuarios del sistema operativo para causar una denegación de servicio (corrupción de memoria anfitrión OS) o posiblemente tener otro impacto no especificado a través de una aplicación hecha a mano que provoca el uso de una dirección física invitado (GPA) en (1) tipo movable ó (2) de memoria extraíble durante una operación MSR_KVM_SYSTEM_TIME kvm_set_msr_common.

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the Intel i915 driver in the Linux kernel handled the allocation of the buffer used for relocation copies. A local user with console access could use this flaw to cause a denial of service or escalate their privileges. A buffer overflow flaw was found in the way UTF-8 characters were converted to UTF-16 in the utf8s_to_utf16s() function of the Linux kernel's FAT file system implementation. A local user able to mount a FAT file system with the "utf8=1" option could use this flaw to crash the system or, potentially, to escalate their privileges.