The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-toolsUpgrade kernel-firmwareUpgrade kvmUpgrade kmod-kvmUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-headersUpgrade perfUpgrade kmod-kvm-debugUpgrade python-perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade kvm-qemu-img | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jan 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 14, 2011 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-symsUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade kernel-default-manUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-trace-devel | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.32-39-powerpc-smpUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.32-39-ia64Upgrade linux-image-2.6.32-39-sparc64-smpUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.32-39-powerpc64-smpUpgrade linux-image-2.6.32-39-386Upgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-3.0.0-16-genericUpgrade linux-image-2.6.32-343-ec2Upgrade linux-image-3.0.0-16-powerpc-smpUpgrade linux-image-2.6.35-32-versatileUpgrade linux-image-3.0.0-16-powerpc64-smpUpgrade linux-image-2.6.32-39-generic-paeUpgrade linux-image-2.6.32-39-sparc64Upgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-3.0.0-16-virtualUpgrade linux-image-2.6.32-39-serverUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.32-39-versatileUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.32-39-virtualUpgrade linux-image-2.6.32-39-powerpcUpgrade linux-image-2.6.32-39-lpiaUpgrade linux-image-2.6.32-39-genericUpgrade linux-image-3.0.0-16-powerpcUpgrade linux-image-2.6.32-39-preemptUpgrade linux-image-2.6.35-32-genericUpgrade linux-image-3.0.0-16-serverUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-3.0.0-16-generic-paeUpgrade linux-image-3.0.0-16-omap | Nov 8, 2024 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub