The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kmod-kvmUpgrade perfUpgrade kmod-kvm-debugUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kvm-qemu-imgUpgrade kernel-debug-develUpgrade kernelUpgrade kvm | Dec 1, 2016 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 17, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 29, 2012 |
| Ubuntu | — | Upgrade linux-image-3.2.0-25-omapUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.2.0-25-highbankUpgrade linux-image-2.6.32-54-sparc64Upgrade linux-image-2.6.32-54-lpiaUpgrade linux-image-3.2.0-25-powerpc-smpUpgrade linux-image-3.2.0-25-genericUpgrade linux-image-2.6.32-54-generic-paeUpgrade linux-image-3.0.0-21-powerpc64-smpUpgrade linux-image-2.6.32-54-preemptUpgrade linux-image-2.6.32-54-powerpcUpgrade linux-image-2.6.32-54-ia64Upgrade linux-image-2.6.32-54-virtualUpgrade linux-image-3.0.0-1211-omap4Upgrade linux-image-3.2.0-25-powerpc64-smpUpgrade linux-image-3.0.0-21-serverUpgrade linux-image-2.6.32-54-powerpc-smpUpgrade linux-image-2.6.32-54-sparc64-smpUpgrade linux-image-3.2.0-25-virtualUpgrade linux-image-2.6.32-54-genericUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.32-54-386Upgrade linux-image-2.6.32-54-serverUpgrade linux-image-3.0.0-21-powerpc-smpUpgrade linux-image-3.0.0-21-genericUpgrade linux-image-3.0.0-21-omapUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-3.0.0-21-powerpcUpgrade linux-image-3.0.0-21-virtualUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-3.2.0-1414-omap4Upgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-3.0.0-21-generic-paeUpgrade linux-image-2.6.32-54-versatileUpgrade linux-image-2.6.32-359-ec2Upgrade linux-image-3.2.0-25-generic-paeUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-2.6.32-54-powerpc64-smp | Nov 8, 2024 | May 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub