CVE-2012-1601

2012-03-2900:00:00

ubuntu.com

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.001

Percentile

26.7%

JSON

The KVM implementation in the Linux kernel before 3.3.6 allows host OS
users to cause a denial of service (NULL pointer dereference and host OS
crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU
already exists.

Bugs

Notes

Author	Note
apw	sha1 below is from the KVM tree, though it is likely to be the right one when it hits upstream. Patch title is: KVM: Ensure all vcpus are consistent with in-kernel irqchip settings now arrived in linus’ tree as the sha1 below

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchlinux< 2.6.24-32.103UNKNOWN
ubuntu10.04noarchlinux< 2.6.32-41.89UNKNOWN
ubuntu11.04noarchlinux< 2.6.38-15.60UNKNOWN
ubuntu11.10noarchlinux< 3.0.0-20.34UNKNOWN
ubuntu12.04noarchlinux< 3.2.0-24.38UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1603.6UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-345.48UNKNOWN
ubuntu10.04noarchlinux-lts-backport-natty< 2.6.38-15.60~lucid1UNKNOWN
ubuntu10.04noarchlinux-lts-backport-oneiric< 3.0.0-20.34~lucid1UNKNOWN
ubuntu11.10noarchlinux-ti-omap4< 3.0.0-1210.22UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	linux	< 2.6.24-32.103	UNKNOWN
ubuntu	10.04	noarch	linux	< 2.6.32-41.89	UNKNOWN
ubuntu	11.04	noarch	linux	< 2.6.38-15.60	UNKNOWN
ubuntu	11.10	noarch	linux	< 3.0.0-20.34	UNKNOWN
ubuntu	12.04	noarch	linux	< 3.2.0-24.38	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1603.6	UNKNOWN
ubuntu	10.04	noarch	linux-ec2	< 2.6.32-345.48	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-natty	< 2.6.38-15.60~lucid1	UNKNOWN
ubuntu	10.04	noarch	linux-lts-backport-oneiric	< 3.0.0-20.34~lucid1	UNKNOWN
ubuntu	11.10	noarch	linux-ti-omap4	< 3.0.0-1210.22	UNKNOWN