CVE-2012-2137

🗓️ 22 Jan 2013 23:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 93 Views🌐 WEB

Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Signaled Interrupts (MSI), irq routing entries, and an incorrect check by the setup_routing_entry function before invoking the kvm_set_irq function

Reporter	Title	Published	Views	Family All 111
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

NVD

Node

linux linux_kernelRange2.6.33–3.0.72

linux linux_kernelRange3.1–3.2.24

linux linux_kernelRange3.3–3.4.81

Node

canonical ubuntu_linuxMatch10.04-

canonical ubuntu_linuxMatch11.10

canonical ubuntu_linuxMatch12.04-

Source	Link
ubuntu	www.ubuntu.5.n6.nabble.com/PATCH-Oneiric-CVE-2012-2137-KVM-Fix-buffer-overflow-in-kvm-set-irq-td4990566.html
lists	www.lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
ubuntu	www.ubuntu.com/usn/USN-1606-1
securityfocus	www.securityfocus.com/bid/54063
ubuntu	www.ubuntu.com/usn/usn-1529-1
git	www.git.kernel.org/
ubuntu	www.ubuntu.com/usn/USN-1594-1
ubuntu	www.ubuntu.com/usn/usn-1607-1
kernel	www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Parameter	Position	Path	Description	CWE
setup_routing_entry	path	virt/kvm/irq_comm.c	Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem of the Linux kernel allowing local users to crash the system and potentially execute arbitrary code.	CWE-119

16 Jun 2026 23:41Current

7.5High risk

Vulners AI Score7.5

CVSS 26.9

EPSS0.00521

CWE-119