Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:58:02 +0000 EUVD-2026-116780 https://cve.radiocsirt.org/vuln/euvd-2026-116780 EUVD-2026-116780 https://cve.radiocsirt.org/vuln/euvd-2026-116780 fkie_cve-2011-4347 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4347 <p>The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.</p> <p>The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4347 GHSA-x4h8-vxmx-gj2j https://cve.radiocsirt.org/vuln/ghsa-x4h8-vxmx-gj2j <p>The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.</p> <p>The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.</p> https://cve.radiocsirt.org/vuln/ghsa-x4h8-vxmx-gj2j gsd-2011-4347 https://cve.radiocsirt.org/vuln/gsd-2011-4347 gsd-2011-4347 https://cve.radiocsirt.org/vuln/gsd-2011-4347 RHSA-2012:0149 — Red Hat Security Advisory: kvm security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2012:0149 <p>kernel: kvm: device assignment DoS</p> <p>kernel: kvm: device assignment DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2012:0149 Withdrawn: UBUNTU-CVE-2011-4347 https://cve.radiocsirt.org/vuln/ubuntu-cve-2011-4347 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-flo, Ubuntu:14.04:LTS: linux-goldfish, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:14.04:LTS: linux-lts-vivid, Ubuntu:14.04:LTS: linux-lts-wily, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:14.04:LTS: linux-mako, Ubuntu:14.04:LTS: linux-manta and 9 more</p> <p>The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation. Please note that privileged access was still needed to re-program the device to for example issue DMA requests. This is typically achieved by touching files on sysfs filesystem. These files are usually not accessible to unprivileged users. As a result, local user could use this flaw to crash the system.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: linux, Ubuntu:14.04:LTS: linux-aws, Ubuntu:14.04:LTS: linux-flo, Ubuntu:14.04:LTS: linux-goldfish, Ubuntu:14.04:LTS: linux-lts-utopic, Ubuntu:14.04:LTS: linux-lts-vivid, Ubuntu:14.04:LTS: linux-lts-wily, Ubuntu:14.04:LTS: linux-lts-xenial, Ubuntu:14.04:LTS: linux-mako, Ubuntu:14.04:LTS: linux-manta and 9 more</p> <p>The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation. Please note that privileged access was still needed to re-program the device to for example issue DMA requests. This is typically achieved by touching files on sysfs filesystem. These files are usually not accessible to unprivileged users. As a result, local user could use this flaw to crash the system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2011-4347