CVE-2016-3713: Linux Kernel

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the kvm_arch_vcpu data structure, and consequently obtain sensitive information or cause a denial of service (system crash), via a crafted ioctl call.

Affected products

• Linux Linux Kernel: up to and including 4.6

Published 2016-06-27. Last modified 2026-06-17.