Vulnerability in Linux Kernel
CVE-2012-1179
The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd_none_or_clear_bad function and page faults for huge pages.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.2 (Medium). Vector: AV:A/AC:M/Au:S/C:N/I:N/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.006 (46.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 47th percentile — 46.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: -0.000
Affected products
Weakness classification (CWE)
References
- rhn.redhat.com/errata/RHSA-2012-0743.html (vendor-advisory)
- lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html (vendor-advisory)
- www.securitytracker.com/id (vdb-entry)
- secunia.com/advisories/48898 (third-party-advisory)
- www.openwall.com/lists/oss-security/2012/03/15/7 (mailing-list)
- github.com/torvalds/linux/commit/4a1d704194a441bf83c636004a479e01360ec850
- bugzilla.redhat.com/show_bug.cgi
- secunia.com/advisories/48404 (third-party-advisory)
- lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html (vendor-advisory)
- marc.info/ (vendor-advisory)