Vulnerability in Red Hat Kvm

CVE-2011-4622

The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer.

EPSS: 0.004 (28.9th percentile) — read the EPSS interpretation.