The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.
CVSS Details
- CVSS 3.1 Base Score: 4.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 1, 2014 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Sep 1, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 19, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Aug 31, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-36-powerpc64-embUpgrade linux-image-3.13.0-36-lowlatencyUpgrade linux-image-3.2.0-69-powerpc64-smpUpgrade linux-image-3.2.0-69-genericUpgrade linux-image-3.2.0-69-highbankUpgrade linux-image-3.13.0-36-powerpc-e500mcUpgrade linux-image-3.2.0-69-omapUpgrade linux-image-3.2.0-69-generic-paeUpgrade linux-image-3.2.0-69-powerpc-smpUpgrade linux-image-3.13.0-36-genericUpgrade linux-image-3.2.0-69-virtualUpgrade linux-image-3.13.0-36-generic-lpaeUpgrade linux-image-3.13.0-36-powerpc-smpUpgrade linux-image-3.2.0-1453-omap4Upgrade linux-image-3.13.0-36-powerpc64-smpUpgrade linux-image-3.13.0-36-powerpc-e500 | Nov 8, 2024 | Sep 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub