CVE-2013-0311 describes a privilege escalation vulnerability in the Linux kernel's vhost.c driver (before version 3.7), specifically impacting KVM guest OS users on affected Linux and Red Hat Enterprise Linux systems. This flaw, rated with a CVSS score of 6.5, allows a guest OS user with existing privileges to gain host OS privileges due to improper handling of cross-region descriptors. While the vulnerability is not listed in CISA's KEV catalog and has no known public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered minimal community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.6.11CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc1:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc2:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc3:*:*:*:*:*:* | ||
3.0CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.0:rc4:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:A/AC:H/Au:S/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.