The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvmUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kmod-kvm | Dec 1, 2016 | Feb 12, 2010 |
| Oracle_linux | — | Upgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade kvmUpgrade kmod-kvm | Oct 16, 2024 | Feb 12, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.24-27-hppa32Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-27-openvzUpgrade linux-image-2.6.31-20-sparc64Upgrade linux-image-2.6.24-27-lpiaUpgrade linux-image-2.6.31-20-powerpc64-smpUpgrade linux-image-2.6.28-18-iop32xUpgrade linux-image-2.6.24-27-genericUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-20-powerpc-smpUpgrade linux-image-2.6.24-27-powerpcUpgrade linux-image-2.6.27-17-virtualUpgrade linux-image-2.6.31-20-sparc64-smpUpgrade linux-image-2.6.31-20-generic-paeUpgrade linux-image-2.6.31-109-imx51Upgrade linux-image-2.6.31-212-dove-z0Upgrade linux-image-2.6.28-18-serverUpgrade linux-image-2.6.24-27-powerpc64-smpUpgrade linux-image-2.6.28-18-genericUpgrade linux-image-2.6.24-27-powerpc-smpUpgrade linux-image-2.6.31-20-powerpcUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-27-serverUpgrade linux-image-2.6.31-305-ec2Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-27-hppa64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-27-xenUpgrade linux-image-2.6.24-27-sparc64Upgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-18-versatileUpgrade linux-image-2.6.24-27-rtUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-20-virtualUpgrade linux-image-2.6.31-20-genericUpgrade linux-image-2.6.31-20-serverUpgrade linux-image-2.6.27-17-serverUpgrade linux-image-2.6.31-20-lpiaUpgrade linux-image-2.6.28-18-virtualUpgrade linux-image-2.6.24-27-sparc64-smpUpgrade linux-image-2.6.28-18-ixp4xxUpgrade linux-image-2.6.24-27-386Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.31-20-386Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-27-lpiacompatUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-27-mckinleyUpgrade linux-image-2.6.24-27-itaniumUpgrade linux-image-2.6.27-17-genericUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-20-ia64Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-212-doveUpgrade linux-image-2.6.28-18-imx51Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-27-virtualUpgrade linux-image-2.6.28-18-lpia | Nov 8, 2024 | Feb 12, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub