CVE-2014-0049

Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancel_work_item data.

Not vulnerable.

This issue did not affect the versions of kvm package as shipped with Red Hat Enterprise Linux 5 as they did not backport the upstream kvm commit that introduced this issue.

This issue did not affect the versions of Linux kernel as shipped Red Hat Enterprise Linux 6 as they did not backport the upstream kvm commit that introduced this issue.

This issue did not affect the versions of Linux kernel as shipped Red Hat Enterprise MRG as they did not provide support for the KVM subsystem.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.