CVE-2012-2137
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2012-2137
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2012-2137.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2012-2137
- Downstream
- Related
- Published
- 2013-01-22T23:55:02Z
- Modified
- 2025-04-11T00:51:21Z
- Summary
- [none]
- Details
-
Buffer overflow in virt/kvm/irqcomm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Signaled Interrupts (MSI), irq routing entries, and an incorrect check by the setuproutingentry function before invoking the kvmset_irq function.
- References
-
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=f2ebd422f71cda9c791f76f85d2ca102ae34a1ed
- http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
- http://marc.info/?l=bugtraq&m=139447903326211&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0743.html
- http://secunia.com/advisories/50952
- http://secunia.com/advisories/50961
- http://ubuntu.5.n6.nabble.com/PATCH-Oneiric-CVE-2012-2137-KVM-Fix-buffer-overflow-in-kvm-set-irq-td4990566.html
- http://ubuntu.com/usn/usn-1529-1
- http://ubuntu.com/usn/usn-1607-1
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24
- http://www.securityfocus.com/bid/54063
- http://www.ubuntu.com/usn/USN-1594-1
- http://www.ubuntu.com/usn/USN-1606-1
- http://www.ubuntu.com/usn/USN-1609-1
- https://bugzilla.redhat.com/show_bug.cgi?id=816151
- https://security-tracker.debian.org/tracker/CVE-2012-2137
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source