Array index error in the kvmvmioctlcreatevcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.
{ "urgency": "not yet assigned" }