CVE-2013-1796: The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a r...

Security readout for executives and security teams

CVE-2013-1796 is a Linux KVM virtualization bug where a guest user could trigger host memory corruption during a KVM time-related operation. The reported impact is denial of service, with unspecified other impact possible. This mainly matters for organizations still running very old or unpatched Linux virtualization hosts. Exposure is most likely on Linux systems using KVM with kernels through 3.8.4 or affected vendor backports before the 2013 advisories. General non-KVM Linux systems are less directly exposed based on the supplied description. Treat as high priority only where legacy KVM hosts remain in service, especially with untrusted guests. For modern supported Linux fleets, the practical urgency is likely lower, but validation is still warranted because host memory corruption crosses a virtualization trust boundary. Mitigation focus: Check vendor advisories for the exact fixed kernel package for each distribution.; Upgrade affected Linux KVM hosts to a vendor-supported fixed kernel.; Prioritize shared or untrusted-guest virtualization hosts before isolated lab systems..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.