CVEvulnerability

CVE-2012-2121

4.9 MEDIUM Published 2012-05-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-05-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-264

Description

The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.

Affected configurations

• linux linux kernel (<= 3.3.3)

Related

Weakness · not in database (1)

References