CVE-2013-6368 json
The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via…
published 12y ago modified 4mo ago also EUVD-2013-6193
- cvss
- 6.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 49%
- public exploits
- 0
- none known
Summary
The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.
Patch / fix
- linux Debian 14, Debian 13, Debian 12 3.12.5-1
debian advisories DEBIAN-CVE-2013-6368
- kvm RHEL 5 VIRTUALIZATION 83-266.el5_10.1
- kmod-kvm RHEL 5 VIRTUALIZATION 83-266.el5_10.1
- kvm-tools RHEL 5 VIRTUALIZATION 83-266.el5_10.1
- kvm-qemu-img RHEL 5 VIRTUALIZATION 83-266.el5_10.1
- kernel RHEL 6 2.6.32-431.1.2.el6
- perf RHEL 6 2.6.32-431.1.2.el6
- python-perf RHEL 6 2.6.32-431.1.2.el6
- kernel-kdump RHEL 6 2.6.32-431.1.2.el6
red hat advisories RHSA-2014:0284RHSA-2014:0163RHSA-2013:1801
- kernel-rt SLE Real Time 11 SP4 3.0.101.rt130-68.1
- kernel-syms-rt SLE Real Time 11 SP4 3.0.101.rt130-68.1
- kernel-rt_trace SLE Real Time 11 SP4 3.0.101.rt130-68.1
- kernel-source-rt SLE Real Time 11 SP4 3.0.101.rt130-68.1
- kernel-ec2 SLES for SAP 11 SP4, SLES 11 SP4 3.0.101-94.1
- kernel-pae SLES for SAP 11 SP4, SLES 11 SP4 3.0.101-94.1
- kernel-xen SLES for SAP 11 SP4, SLES 11 SP4 3.0.101-94.1
- kernel-syms SLES for SAP 11 SP4, SLES 11 SP4 3.0.101-94.1
suse advisories SUSE-SU-2017:1102-1SUSE-SU-2017:0437-1
Is CVE-2013-6368 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2013-6368 updated cvss 6.2
kvm: cross page vapic_addr access
-
Red Hat Enterprise Linux 5 kvmaffected: no fix available
-
Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) kernel 2.6.32-358.37.1.el6, python-perf 2.6.32-358.37.1.el6, kernel-debuginfo-common-x86_64 2.6.32-358.37.1.el6fixed: vendor fix RHSA-2014:0284
-
Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-431.1.2.el6, kernel 2.6.32-431.1.2.el6, kernel-firmware 2.6.32-431.1.2.el6, kernel-abi-whitelists 2.6.32-431.1.2.el6, kernel-debuginfo-common-i686 2.6.32-431.1.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.1.2.el6fixed: vendor fix RHSA-2013:1801
-
Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) kvm 83-266.el5_10.1, kmod-kvm 83-266.el5_10.1, kvm-tools 83-266.el5_10.1, kvm-qemu-img 83-266.el5_10.1fixed: vendor fix RHSA-2014:0163
-
Red Hat Enterprise Linux Desktop Optional (v. 6) kernel 2.6.32-431.1.2.el6, python-perf 2.6.32-431.1.2.el6, kernel-debuginfo-common-i686 2.6.32-431.1.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.1.2.el6 Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-431.1.2.el6, kernel 2.6.32-431.1.2.el6, kernel-firmware 2.6.32-431.1.2.el6, kernel-abi-whitelists 2.6.32-431.1.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.1.2.el6fixed: vendor fix RHSA-2013:1801
-
Red Hat Enterprise Linux HPC Node EUS (v. 6.4) perf 2.6.32-358.37.1.el6, kernel 2.6.32-358.37.1.el6, kernel-firmware 2.6.32-358.37.1.el6, kernel-debuginfo-common-x86_64 2.6.32-358.37.1.el6fixed: vendor fix RHSA-2014:0284
-
Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel 2.6.32-431.1.2.el6, python-perf 2.6.32-431.1.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.1.2.el6 Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-431.1.2.el6, kernel 2.6.32-431.1.2.el6, kernel-kdump 2.6.32-431.1.2.el6, kernel-firmware 2.6.32-431.1.2.el6, kernel-bootwrapper 2.6.32-431.1.2.el6, kernel-abi-whitelists 2.6.32-431.1.2.el6, +4 morefixed: vendor fix RHSA-2013:1801
-
Red Hat Enterprise Linux Server EUS (v. 6.4) perf 2.6.32-358.37.1.el6, kernel 2.6.32-358.37.1.el6, kernel-kdump 2.6.32-358.37.1.el6, kernel-firmware 2.6.32-358.37.1.el6, kernel-bootwrapper 2.6.32-358.37.1.el6, kernel-debuginfo-common-i686 2.6.32-358.37.1.el6, +3 morefixed: vendor fix RHSA-2014:0284
show 5 moreshow fewer
-
Red Hat Enterprise Linux Server Optional (v. 6) kernel 2.6.32-431.1.2.el6, python-perf 2.6.32-431.1.2.el6, kernel-debuginfo-common-i686 2.6.32-431.1.2.el6, kernel-debuginfo-common-ppc64 2.6.32-431.1.2.el6, kernel-debuginfo-common-s390x 2.6.32-431.1.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.1.2.el6fixed: vendor fix RHSA-2013:1801
-
Red Hat Enterprise Linux Server Optional EUS (v. 6.4) kernel 2.6.32-358.37.1.el6, python-perf 2.6.32-358.37.1.el6, kernel-debuginfo-common-i686 2.6.32-358.37.1.el6, kernel-debuginfo-common-ppc64 2.6.32-358.37.1.el6, kernel-debuginfo-common-s390x 2.6.32-358.37.1.el6, kernel-debuginfo-common-x86_64 2.6.32-358.37.1.el6fixed: vendor fix RHSA-2014:0284
-
Red Hat Enterprise Linux Virtualization (v. 5 server) kvm 83-266.el5_10.1, kmod-kvm 83-266.el5_10.1, kvm-tools 83-266.el5_10.1, kvm-qemu-img 83-266.el5_10.1fixed: vendor fix RHSA-2014:0163
-
Red Hat Enterprise Linux Workstation (v. 6) perf 2.6.32-431.1.2.el6, kernel 2.6.32-431.1.2.el6, kernel-firmware 2.6.32-431.1.2.el6, kernel-abi-whitelists 2.6.32-431.1.2.el6, kernel-debuginfo-common-i686 2.6.32-431.1.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.1.2.el6 Red Hat Enterprise Linux Workstation Optional (v. 6) kernel 2.6.32-431.1.2.el6, python-perf 2.6.32-431.1.2.el6, kernel-debuginfo-common-i686 2.6.32-431.1.2.el6, kernel-debuginfo-common-x86_64 2.6.32-431.1.2.el6fixed: vendor fix RHSA-2013:1801
-
Red Hat Enterprise Linux 5 kernel Red Hat Enterprise Linux 7 perf, kernel, bpftool, python-perf, kernel-kdump, kernel-tools, +3 more Red Hat Enterprise Linux Desktop (v. 6) kernel-headers 2.6.32-431.1.2.el6 Red Hat Enterprise Linux HPC Node (v. 6) kernel-headers 2.6.32-431.1.2.el6 Red Hat Enterprise Linux HPC Node EUS (v. 6.4) kernel-headers 2.6.32-358.37.1.el6 Red Hat Enterprise Linux Server (v. 6) kernel-headers 2.6.32-431.1.2.el6not affected: vulnerable code not present
+3 more productsfewer
Red Hat Enterprise Linux Server EUS (v. 6.4) kernel-headers 2.6.32-358.37.1.el6 Red Hat Enterprise Linux Workstation (v. 6) kernel-headers 2.6.32-431.1.2.el6 Red Hat Enterprise MRG 2 kernel-rt, mrg-rt-release, kernel-rt-trace, kernel-rt-vanilla, kernel-rt-firmware
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.61% chance of exploitation in the next 30 days, higher than 49% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- github.com https://github.com/torvalds/linux/commit/fda4e2e85589191b123d31cdc21fd33ee70f50fd referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.2 | AV:L/AC:H/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
- Technology feeds
References
-
github.com
/torvalds/linux/commit/fda4e2e85589191b123d31cdc21fd33ee70f50fd
exploit, patch
-
ubuntu.com
/usn/USN-2135-1
vendor-advisory
-
lists.opensuse.org
/opensuse-updates/2014-02/msg00045.html
vendor-advisory
-
ubuntu.com
/usn/USN-2138-1
vendor-advisory
-
ubuntu.com
/usn/USN-2113-1
vendor-advisory
-
ubuntu.com
/usn/USN-2141-1
vendor-advisory
-
ubuntu.com
/usn/USN-2136-1
vendor-advisory
-
ubuntu.com
/usn/USN-2139-1
vendor-advisory
-
ubuntu.com
/usn/USN-2134-1
vendor-advisory
-
ubuntu.com
/usn/USN-2117-1
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2013-1801.html
vendor-advisory
-
ubuntu.com
/usn/USN-2133-1
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2014-0284.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2014-0163.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2014-02/msg00002.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2014-02/msg00003.html
vendor-advisory
-
openwall.com
/lists/oss-security/2013/12/12/12
mailing-list
-
securityfocus.com
/bid/64291
vdb-entry
- git.kernel.org /?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fda4e2e85589191b123d31cdc21fd33ee70f50fd
- bugzilla.redhat.com /show_bug.cgi?id=1032210
Sources
- CVE List CVE-2013-6368
- NVD CVE-2013-6368
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.