PT-2012-3819 · Linux+2 · Linux Kernel+2

Petr Matousek · Publicado 2012-05-17 · Atualizado 2018-01-05 · CVE-2012-2121

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3.4

Description The issue is related to the KVM implementation in the Linux kernel, which does not properly manage the relationships between memory slots and the iommu. This allows guest OS users with administrative access to cause a denial of service, resulting in a memory leak and host OS crash, by conducting hotunplug and hotplug operations on devices.

Recommendations For Linux kernel versions prior to 3.3.4, update to version 3.3.4 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CESA-2012_0743

CVE-2012-2121

DSA-2668-1

RHSA-2012:0676

RHSA-2012:0743

RHSA-2012_0676

RHSA-2012_0743

USN-1260-1

USN-1457-1

USN-1470-1

USN-1471-1

USN-1472-1

USN-1473-1

USN-1474-1

USN-1476-1

USN-1577-1

USN-2036-1

USN-2037-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Referências · 28

• https://github.com/torvalds/linux/commit/09ca8e1173bcb12e2a449698c9ae3b86a8a10195 · Nota
• https://ubuntu.com/security/notices/USN-1474-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1471-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2036-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2012-2121 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2012-0743.html · Aviso do Fabricante
• http://ubuntu.com/usn/USN-2037-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/04/19/16 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-2121 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=814149 · Nota
• http://ubuntu.com/usn/USN-1577-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1476-1 · Aviso do Fabricante
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4 · Nota
• http://ubuntu.com/usn/USN-2036-1 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2012-0743.html · Aviso do Fabricante