Severity

High

Analysis Summary

Linux could allow a local guest-authenticated attacker to gain elevated privileges on the system, caused by a buffer overflow in the vhost/vhost_net kernel module. By passing descriptors with invalid length, an authenticated attacker could exploit this vulnerability to gain elevated privileges on the host system.

Impact

Privilege access

Affected Vendors

Linux

Remediation

Upgrade to the version of the 5.3 kernel.