arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9756