CVE-2014-3601

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.

• CWE-189

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlThird Party Advisory
• http://secunia.com/advisories/60830
• http://www.securityfocus.com/bid/69489
• http://www.ubuntu.com/usn/USN-2356-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2357-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2358-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2359-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1131951Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95689
• https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7Exploit, Patch
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.htmlThird Party Advisory
• http://secunia.com/advisories/60830
• http://www.securityfocus.com/bid/69489
• http://www.ubuntu.com/usn/USN-2356-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2357-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2358-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2359-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1131951Issue Tracking
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95689
• https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7Exploit, Patch

Published

Sep 1, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3595Cross-site scripting (XSS) vulnerability in spacewalk-java 1…
• CVE-2014-3596The getCN function in Apache Axis 1.4 and earlier does not p…
• CVE-2014-3597Multiple buffer overflows in the php_parserr function in ext…
• CVE-2014-3598The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows r…
• CVE-2014-3599HornetQ REST is vulnerable to XML External Entity due to ins…6.5
• CVE-2014-3600XML external entity (XXE) vulnerability in Apache ActiveMQ 5…
• CVE-2014-3602Red Hat OpenShift Enterprise before 2.2 allows local users t…
• CVE-2014-3603The (1) HttpResource and (2) FileBackedHttpResource implemen…
• CVE-2014-3604Certificates.java in Not Yet Commons SSL before 0.3.15 does …
• CVE-2014-3605Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-3606Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-3607DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does …