The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU already exists.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kmod-kvmUpgrade python-perfUpgrade kernel-headersUpgrade kvmUpgrade kernelUpgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade kernel-develUpgrade kvm-qemu-imgUpgrade perfUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-firmware | Dec 1, 2016 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | May 17, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 7, 2012 |
| Suse | — | Upgrade hyper-v-kmp-traceUpgrade kernel-xen-baseUpgrade kernel-ppc64-develUpgrade kernel-trace-extraUpgrade ext4dev-kmp-xenUpgrade kernel-xen-extraUpgrade btrfs-kmp-paeUpgrade xen-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-xen-develUpgrade kernel-pae-extraUpgrade kernel-traceUpgrade ext4dev-kmp-traceUpgrade kernel-ppc64Upgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-xenUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade xen-kmp-traceUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade btrfs-kmp-defaultUpgrade kernel-paeUpgrade ext4dev-kmp-paeUpgrade xen-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-pae-devel | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-32-lpiaUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-2.6.24-32-rtUpgrade linux-image-3.2.0-24-genericUpgrade linux-image-2.6.24-32-itaniumUpgrade linux-image-2.6.24-32-sparc64-smpUpgrade linux-image-2.6.24-32-powerpcUpgrade linux-image-2.6.32-41-sparc64-smpUpgrade linux-image-3.0.0-20-omapUpgrade linux-image-2.6.32-41-lpiaUpgrade linux-image-2.6.24-32-sparc64Upgrade linux-image-3.0.0-20-powerpc-smpUpgrade linux-image-2.6.24-32-hppa64Upgrade linux-image-3.0.0-20-virtualUpgrade linux-image-3.0.0-20-generic-paeUpgrade linux-image-3.2.0-24-powerpc-smpUpgrade linux-image-2.6.24-32-hppa32Upgrade linux-image-2.6.32-41-serverUpgrade linux-image-2.6.32-41-virtualUpgrade linux-image-2.6.32-41-generic-paeUpgrade linux-image-2.6.32-41-ia64Upgrade linux-image-2.6.24-32-386Upgrade linux-image-3.0.0-1210-omap4Upgrade linux-image-2.6.24-32-openvzUpgrade linux-image-2.6.32-41-powerpcUpgrade linux-image-3.0.0-20-powerpcUpgrade linux-image-2.6.24-32-xenUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-2.6.24-32-serverUpgrade linux-image-2.6.24-32-mckinleyUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-3.0.0-20-powerpc64-smpUpgrade linux-image-3.2.0-24-powerpc64-smpUpgrade linux-image-3.2.0-24-omapUpgrade linux-image-3.2.0-24-virtualUpgrade linux-image-3.0.0-20-genericUpgrade linux-image-2.6.24-32-virtualUpgrade linux-image-2.6.32-41-powerpc-smpUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.24-32-powerpc64-smpUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.24-32-genericUpgrade linux-image-2.6.32-41-genericUpgrade linux-image-2.6.32-345-ec2Upgrade linux-image-2.6.24-32-powerpc-smpUpgrade linux-image-3.2.0-24-generic-paeUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-2.6.32-41-versatileUpgrade linux-image-2.6.32-41-sparc64Upgrade linux-image-3.2.0-1413-omap4Upgrade linux-image-2.6.32-41-powerpc64-smpUpgrade linux-image-2.6.32-41-preemptUpgrade linux-image-2.6.24-32-lpiacompatUpgrade linux-image-3.0.0-20-serverUpgrade linux-image-2.6.32-41-386 | Nov 8, 2024 | May 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub