CVE-2013-1943: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows local users to gain privileges or obtain sensitive information from kernel memory via a crafted application, related to arch/x86/kvm/paging_tmpl.h and virt/kvm/kvm_main.c.

Affected products

• Canonical Ubuntu Linux: version 10.04 only
• Linux Linux Kernel: before 3.0 (fixed in 3.0)
• Red Hat Enterprise Linux: version 5.0 only
• Red Hat Enterprise Linux Eus: version 6.2 only; version 6.3 only

Published 2013-07-16. Last modified 2026-06-16.