CWE Code: 125
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Out-of-bounds Read
Summary: kvm in the linux kernel before 4.8.12, when i/o apic is enabled, does not properly restrict the vcpu index, which allows guest os users to gain host os privileges or cause a denial of service (out-of-bounds array access and host os crash) via a crafted interrupt request, related to arch/x86/kvm/ioapic.c and arch/x86/kvm/ioapic.h.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-12-28
Last Modified Date: 2016-12-31