CVE-2013-4587: Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in t...

Security readout for executives and security teams

CVE-2013-4587 is a Linux kernel KVM flaw where a local user could abuse a large virtual CPU identifier to gain higher privileges. This matters most on virtualization hosts or shared systems where non-admin users can interact with KVM. Exposure is likely limited to Linux systems running affected KVM-capable kernels, especially virtualization hosts. The provided affected-product metadata is incomplete, so confirm exposure through vendor kernel advisories and deployed kernel versions. Treat as priority patching for shared virtualization infrastructure and multi-user Linux systems. Isolated systems without KVM exposure or untrusted local users are lower urgency, but should still receive normal kernel maintenance. Mitigation focus: Apply kernel updates from the relevant Linux distribution advisory.; Reboot systems into the fixed kernel after updating.; Restrict KVM access to trusted local users until patched..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.