CVE-2012-2121

Linux Kernel < 3.3.4 - Denial of Service via KVM Memory Slot Hotplug Operations

Title source: llm
STIX 2.1

Description

The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.

References (11)

Core 11
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50732
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0743.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027083
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/04/19/16
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=814149
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1577-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2036-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2037-1
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0676.html

Scores

EPSS 0.0041
EPSS Percentile 34.1%

Details

CWE
CWE-264
Status published
Products (1)
linux/linux_kernel < 3.3.3
Published May 17, 2012
Tracked Since Feb 18, 2026