CVE-2013-5634: Linux Kernel

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service (NULL pointer dereference, OOPS, and host OS crash) or possibly have unspecified other impact by omitting vCPU initialization before a KVM_GET_REG_LIST ioctl call.

Affected products

• Linux Linux Kernel: up to and including 3.9.11; version 3.9.0 only; version 3.9.1 only; version 3.9.2 only; version 3.9.3 only; version 3.9.4 only; …

Published 2013-09-25. Last modified 2026-06-16.