CVE-2013-6367: The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5...

Security readout for executives and security teams

This is a host-crash risk in Linux KVM. A user inside a guest operating system could trigger a divide-by-zero condition in the host kernel, causing denial of service. The business concern is availability of virtualized workloads, especially where guests are less trusted. Exposure is most likely on Linux KVM hosts running affected or unpatched kernels, particularly where guest users are not fully trusted. Systems not using KVM, not hosting guests, or already updated through vendor kernel advisories have materially lower exposure. Treat as a priority patch for virtualization infrastructure that runs untrusted or multi-tenant guests. It is not evidenced as actively exploited in the provided sources, but a host crash can create broad outage impact across hosted workloads. Mitigation focus: Apply the relevant vendor kernel update for each affected distribution.; Upgrade or backport the upstream kernel fix where vendor packages are unavailable.; Reboot hosts into the patched kernel after updating..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.