CVE-2013-4592: Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 a...

Security readout for executives and security teams

This is a Linux KVM host denial-of-service issue. A local user with certain device access could trigger a kernel memory leak and consume host memory. It is not described as remote code execution, and the provided sources do not show active exploitation. Exposure is most likely on legacy Linux virtualization hosts using KVM, especially kernels before 3.9 or distributor kernels missing the relevant backport. Public internet exposure is not indicated by the sources. Prioritize if the organization still runs legacy KVM hosts or unpatched distributor kernels. For fully supported, updated Linux virtualization platforms, business urgency is low. Mitigation focus: Update affected Linux kernels using the relevant distribution security advisory.; Confirm vendor kernels include the upstream KVM memory leak fix or a backport.; Retire unsupported virtualization hosts that cannot receive kernel security updates..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.