Description
The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | linux-2.6 | 2.6.32-41squeeze2 | DSA-2443-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +15 | 2.6.32-220.7.1.el6 | RHSA-2012:0350 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Virtualization 5 | kvm +4 | 83-249.el5 | RHSA-2012:0149 |
| RHEL 6.1 EUS | perf +14 | 2.6.32-131.29.1.el6 | RHSA-2012:1042 |
Advisories 4
- RHSA-2012:0350 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2443-1 linux-2.6 - several Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2012:1042 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2012:0149 Red Hat Security Advisory: kvm security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025