CVE-2012-0045

Linux Kernel < 3.2.14 - Denial of Service via KVM em_syscall Opcode Handling

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-0045. PoCs published by Stephan Sattler.

AI-analyzed exploit summary The provided code is a minimal 32-bit assembly stub that performs a syscall, likely intended as a placeholder or incomplete PoC for CVE-2012-0045, a local DoS vulnerability in Linux kernels running as guest images.

Description

The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.

Exploits (1)

exploitdb STUB VERIFIED

by Stephan Sattler · textdoslinux

https://www.exploit-db.com/exploits/36545

View Code ZIP pw:eip

The provided code is a minimal 32-bit assembly stub that performs a syscall, likely intended as a placeholder or incomplete PoC for CVE-2012-0045, a local DoS vulnerability in Linux kernels running as guest images.

Classification

Stub 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Theoretical

Target: Linux kernel (guest images)

No auth needed

Prerequisites: Local access to a vulnerable Linux kernel running as a guest image

MITRE ATT&CK