The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kvm-qemu-imgUpgrade kernel-debug-develUpgrade kernel-develUpgrade kvmUpgrade kernel-docUpgrade kmod-kvmUpgrade kmod-kvm-debugUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kvm-tools | Dec 1, 2016 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 17, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 29, 2012 |
| Ubuntu | — | Upgrade linux-image-3.2.0-25-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-15-virtualUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-3.0.0-21-generic-paeUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.32-54-versatileUpgrade linux-image-3.0.0-21-powerpcUpgrade linux-image-2.6.32-54-powerpc64-smpUpgrade linux-image-3.2.0-1414-omap4Upgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-2.6.32-359-ec2Upgrade linux-image-3.0.0-21-virtualUpgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-2.6.32-54-generic-paeUpgrade linux-image-2.6.32-54-virtualUpgrade linux-image-3.0.0-21-genericUpgrade linux-image-2.6.32-54-sparc64Upgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.0.0-21-powerpc-smpUpgrade linux-image-2.6.32-54-powerpc-smpUpgrade linux-image-2.6.32-54-powerpcUpgrade linux-image-3.2.0-25-virtualUpgrade linux-image-3.2.0-25-powerpc64-smpUpgrade linux-image-2.6.32-54-sparc64-smpUpgrade linux-image-3.0.0-1211-omap4Upgrade linux-image-2.6.32-54-ia64Upgrade linux-image-3.0.0-21-powerpc64-smpUpgrade linux-image-2.6.32-54-386Upgrade linux-image-3.0.0-21-omapUpgrade linux-image-2.6.32-54-preemptUpgrade linux-image-3.2.0-25-highbankUpgrade linux-image-2.6.32-54-serverUpgrade linux-image-3.2.0-25-omapUpgrade linux-image-3.2.0-25-powerpc-smpUpgrade linux-image-3.0.0-21-serverUpgrade linux-image-3.2.0-25-genericUpgrade linux-image-2.6.32-54-lpiaUpgrade linux-image-2.6.32-54-generic | Nov 8, 2024 | May 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub