Buffer Overflow in complete_emulated_mmio Function in Linux Kernel

CVE-2014-0049 · HIGH Severity

AV:A/AC:M/AU:S/C:C/I:C/A:C

Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancel_work_item data.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.