CVE - CVE-2012-2121

CVE-ID
CVE-2012-2121	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1027083 URL:http://www.securitytracker.com/id?1027083 MISC:50732 URL:http://secunia.com/advisories/50732 MISC:RHSA-2012:0676 URL:http://rhn.redhat.com/errata/RHSA-2012-0676.html MISC:RHSA-2012:0743 URL:http://rhn.redhat.com/errata/RHSA-2012-0743.html MISC:USN-1577-1 URL:http://www.ubuntu.com/usn/USN-1577-1 MISC:USN-2036-1 URL:http://www.ubuntu.com/usn/USN-2036-1 MISC:USN-2037-1 URL:http://www.ubuntu.com/usn/USN-2037-1 MISC:[oss-security] 20120419 Re: CVE request -- kernel: kvm: device assignment page leak URL:http://www.openwall.com/lists/oss-security/2012/04/19/16 MISC:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4 URL:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=814149 URL:https://bugzilla.redhat.com/show_bug.cgi?id=814149 MISC:https://github.com/torvalds/linux/commit/09ca8e1173bcb12e2a449698c9ae3b86a8a10195 URL:https://github.com/torvalds/linux/commit/09ca8e1173bcb12e2a449698c9ae3b86a8a10195
Assigning CNA
Red Hat, Inc.
Date Record Created
20120404	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120404)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)