The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-firmware | Dec 1, 2016 | Jun 8, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 8, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 20, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-41-preemptUpgrade linux-image-2.6.38-14-powerpcUpgrade linux-image-2.6.32-41-sparc64Upgrade linux-image-3.0.0-19-serverUpgrade linux-image-2.6.35-32-genericUpgrade linux-image-3.0.0-19-omapUpgrade linux-image-2.6.38-14-virtualUpgrade linux-image-3.0.0-19-genericUpgrade linux-image-2.6.32-41-versatileUpgrade linux-image-3.0.0-19-powerpc-smpUpgrade linux-image-2.6.32-41-ia64Upgrade linux-image-2.6.38-14-powerpc64-smpUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-3.0.0-19-virtualUpgrade linux-image-2.6.38-14-genericUpgrade linux-image-2.6.32-41-powerpc-smpUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.32-345-ec2Upgrade linux-image-2.6.32-41-powerpc64-smpUpgrade linux-image-2.6.32-41-generic-paeUpgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.38-14-serverUpgrade linux-image-2.6.32-41-genericUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-3.0.0-19-powerpc64-smpUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.38-14-versatileUpgrade linux-image-3.0.0-19-powerpcUpgrade linux-image-2.6.38-14-powerpc-smpUpgrade linux-image-2.6.32-41-serverUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-2.6.32-41-sparc64-smpUpgrade linux-image-2.6.32-41-powerpcUpgrade linux-image-2.6.32-41-lpiaUpgrade linux-image-2.6.32-41-virtualUpgrade linux-image-3.0.0-19-generic-paeUpgrade linux-image-2.6.38-14-omapUpgrade linux-image-2.6.38-14-generic-paeUpgrade linux-image-2.6.32-41-386 | Nov 8, 2024 | Jun 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub