Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.2
CVE-2012-1179: Linux kernel KVM can crash host if guest has admin
CVE-2012-1179 · published 14 years ago
Summary
Versions of the Linux kernel before 3.3.1 let a user who has administrative rights inside a virtual machine cause the host machine to stop working. The issue occurs when the virtual machine uses large memory pages. Upgrade the kernel to version 3.3.1 or later, or apply the available security patches, to prevent the crash.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel |
<= 3.3 cpe:2.3:o:linux:linux_kernel:*:rc7:*:*:*:*:*:* |
Original advisory text
The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd_none_or_c...
The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd_none_or_clear_bad function and page faults for huge pages.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
- http://marc.info/?l=bugtraq&m=139447903326211&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0743.html
- http://secunia.com/advisories/48404
- http://secunia.com/advisories/48898
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.1
- http://www.openwall.com/lists/oss-security/2012/03/15/7
- http://www.securitytracker.com/id?1027084
- https://bugzilla.redhat.com/show_bug.cgi?id=803793
- https://github.com/torvalds/linux/commit/4a1d704194a441bf83c636004a479e01360ec85...
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
5.2
Medium
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published17 May 2012
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2012-1179 · NVD
Track software like this
Free during beta