CVE-2017-2583: Linux Kernel

High severity, CVSS 8.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application.

Affected products

• Linux Linux Kernel: up to and including 4.9.4

Published 2017-02-06. Last modified 2026-06-17.