CVE-2010-5313

Advisory lineage Upstream: 0 Downstream: 4
Modified
Published: 30 Nov 2014, 01:00
Last modified:07 Aug 2024, 04:17

Vulnerability Summary

Overall Risk (default)
low
20/100
CVSS Score
4.9 MEDIUM
v2.0 (nvd)
EPSS Score
0.05% LOW
0% probability -0.02%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

30 Nov 2014, 01:00
Published
Vulnerability first disclosed
07 Aug 2024, 04:17
Last Modified
Vulnerability information updated

Description

Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS crash) via a crafted instruction that triggers an L2 emulation failure report, a similar issue to CVE-2014-7842.

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.05%• Percentile: 16%

Techniques & Countermeasures

  • CWE-362•Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

    The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected Systems

  • linux•linux_kernel

    ≤ 2.6.37

References (11)