CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 4.7
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: the em_sysenter function in arch/x86/kvm/emulate.c in the linux kernel before 3.18.5, when the guest os lacks sysenter msr initialization, allows guest os users to gain guest os privileges or cause a denial of service (guest os crash) by triggering use of a 16-bit code segment for emulation of a sysenter instruction.
Access Authentication: NONE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/COMPLETE
Published Date: 2015-03-02
Last Modified Date: 2016-12-24