Every CVE Search/ Get API key

CVE-2010-0309

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM...

6.8 MediumFix available

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Exploit likelihood

2.77%Up 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Record
CVE-2010-0309
CVSS 2.0
6.8 MediumAV:N/AC:L/Au:S/C:N/I:N/A:C
Weakness
CWE-16
Updated
2026-11-02
CVE List No score

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Record
CVE-2010-0309
Updated
2026-11-02
EUVDEUVD-2010-0340 No score

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Record
EUVD-2010-0340
Updated
2026-11-03
GitHub AdvisoriesGHSA-wqgc-3hgm-hrw9 No score

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM...

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Record
GHSA-wqgc-3hgm-hrw9
Updated
2026-11-02
OSVAZL-34841 No score

CVE-2010-0309 affecting package kernel for versions less than 6.6.35.1-4

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Record
AZL-34841
Updated
2026-11-05
OSVAZL-6509 No score

CVE-2010-0309 affecting package kernel for versions less than 5.10.78.1-1

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Record
AZL-6509
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:3
 before 6.6.35.1-4
6.6.35.1-4
kernel
Azure Linux:2
 before 5.10.78.1-1
5.10.78.1-1
linux-2.6
Debian:5.0
From an advisory covering 13 CVEs
 before 2.6.26-21lenny3, plus listed versions
2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15
Show 22 moreShow less
2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19lenny12.6.26-19lenny22.6.26-19~bpo40+12.6.26-202.6.26-20~bpo40+12.6.26-212.6.26-21lenny12.6.26-21lenny22.6.26-21~bpo40+1
2.6.26-21lenny3
kvm
Debian:5.0
From an advisory covering 4 CVEs
 before 72+dfsg-5~lenny5, plus listed versions
72+dfsg-472+dfsg-5~lenny172+dfsg-5~lenny272+dfsg-5~lenny372+dfsg-5~lenny4
72+dfsg-5~lenny5
kmod-kvm
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-debuginfo
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-qemu-img
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-tools
Red Hat:rhel_virtualization:5::client
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kmod-kvm
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
Show 6 moreShow less
Affected packages
PackageAffectedFixed
kvm
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-debuginfo
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-qemu-img
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
kvm-tools
Red Hat:rhel_virtualization:5::server
From an advisory covering 4 CVEs
 before 0:83-105.el5_4.22
0:83-105.el5_4.22
rhev-hypervisor
Red Hat:enterprise_linux:5::hypervisor
From an advisory covering 8 CVEs
 before 0:5.4-2.1.8.el5_4rhev2_1
0:5.4-2.1.8.el5_4rhev2_1
rhev-hypervisor-pxe
Red Hat:enterprise_linux:5::hypervisor
From an advisory covering 8 CVEs
 before 0:5.4-2.1.8.el5_4rhev2_1
0:5.4-2.1.8.el5_4rhev2_1

History

History
RecordedChangedSources
affected
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0309 is a medium vulnerability (CVSS 6.8) in Linux Kernel, published February 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.77%, the 86th percentile. Fixed in kernel 6.6.35.1-4.

References

Show 65 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open