The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernelUpgrade kvmUpgrade kernel-debug-develUpgrade kvm-qemu-imgUpgrade kernel-debugUpgrade kernel-firmwareUpgrade perfUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade kernel-docUpgrade python-perfUpgrade kernel-headersUpgrade kmod-kvm | Dec 1, 2016 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 17, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 29, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-54-virtualUpgrade linux-image-3.0.0-21-omapUpgrade linux-image-3.0.0-1211-omap4Upgrade linux-image-2.6.32-54-generic-paeUpgrade linux-image-2.6.32-54-powerpc-smpUpgrade linux-image-3.2.0-25-powerpc64-smpUpgrade linux-image-2.6.32-54-genericUpgrade linux-image-2.6.32-54-serverUpgrade linux-image-3.2.0-25-genericUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-2.6.32-54-sparc64Upgrade linux-image-3.2.0-25-highbankUpgrade linux-image-2.6.32-54-386Upgrade linux-image-3.0.0-21-powerpc64-smpUpgrade linux-image-3.2.0-25-powerpc-smpUpgrade linux-image-2.6.32-54-sparc64-smpUpgrade linux-image-2.6.32-54-powerpcUpgrade linux-image-3.0.0-21-serverUpgrade linux-image-2.6.32-54-ia64Upgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.32-54-preemptUpgrade linux-image-3.0.0-21-genericUpgrade linux-image-3.2.0-25-virtualUpgrade linux-image-3.0.0-21-powerpc-smpUpgrade linux-image-2.6.32-54-lpiaUpgrade linux-image-3.2.0-25-omapUpgrade linux-image-2.6.32-54-powerpc64-smpUpgrade linux-image-2.6.32-54-versatileUpgrade linux-image-3.0.0-21-powerpcUpgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-3.2.0-25-generic-paeUpgrade linux-image-3.2.0-1414-omap4Upgrade linux-image-2.6.32-359-ec2Upgrade linux-image-3.0.0-21-virtualUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-3.0.0-21-generic-paeUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-2.6.38-1209-omap4 | Nov 8, 2024 | May 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub