Red Hat Security Advisory

RHSA-2012:0149

kvm security and bug fix update

Released 2012-02-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) kmod-kvm-83-249.el5, kmod-kvm-debug-83-249.el5, kvm-83-249.el5 +2
Red Hat Enterprise Linux Virtualization (v. 5 server) kmod-kvm-83-249.el5, kmod-kvm-debug-83-249.el5, kvm-83-249.el5 +2

Fixes 1 record

TI-2011-03812 CVE-2011-4347 · GHSA-x4h8-vxmx-gj2j

The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem…

LOW 19

The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host…

CVSS 2.0MEDIUM 4.0 Local No auth Interaction — EPSS 0.00367 Published 2013-06-08 Partial fix CWE-264