The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.
Information Disclosure
Linux
Red Hat
Canonical
Enterprise Linux
+3
NVD
GitHub
CVSS 3.1
7.8
EPSS
0.1%