CVE-2013-4587 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4587): Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.
Fix in 3.13: https://github.com/torvalds/linux/commit/338c7dbadd2671189cec7faf64c84d01071b3f96