CVE-2012-2121
Last modified
CVE-2012-2121 is a vulnerability of currently unknown severity. The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.. EPSS estimates a 0.41% chance of exploitation in the next 30 days.
Description
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | <= 3.3.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-2121?
How severe is CVE-2012-2121?
How do I fix CVE-2012-2121?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-2115SQL injection vulnerability in interface/login/validateUser.…
- CVE-2012-2116Cross-site request forgery (CSRF) vulnerability in the Comme…
- CVE-2012-2117Cross-site scripting (XSS) vulnerability in the Gigya - Soci…
- CVE-2012-2118Format string vulnerability in the LogVHdrMessageVerb functi…
- CVE-2012-2119Buffer overflow in the macvtap device driver in the Linux ke…
- CVE-2012-2120latex2man in texlive-extra-utils 2011.20120322, and possibly…
- CVE-2012-2122sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x be…
- CVE-2012-2123The cap_bprm_set_creds function in security/commoncap.c in t…
- CVE-2012-2124functions/imap_general.php in SquirrelMail, as used in Red H…
- CVE-2012-2125RubyGems before 1.8.23 can redirect HTTPS connections to HTT…
- CVE-2012-2126RubyGems before 1.8.23 does not verify an SSL certificate, w…
- CVE-2012-2127fs/proc/root.c in the procfs implementation in the Linux ker…
Are you affected by CVE-2012-2121?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST