CVE-2014-0049: Linux Kernel

High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancel_work_item data.

Affected products

• Linux Linux Kernel: before 3.13.6 (fixed in 3.13.6)

Published 2014-03-11. Last modified 2026-06-17.