Every CVE Search/ Get API key

CVE-2017-12168

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11...

6.0 MediumFix available

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.42%Down 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.0

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).

Record
CVE-2017-12168
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-617
Updated
2026-11-02
CVE List No score

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).

Record
CVE-2017-12168
Weakness
CWE-617
Updated
2026-11-02
EUVDEUVD-2017-3744 No score

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).

Record
EUVD-2017-3744
Updated
2026-11-03
GitHub AdvisoriesGHSA-2rfq-4jx8-3hp9 6.0

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11...

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).

Record
GHSA-2rfq-4jx8-3hp9
CVSS 3.0
6.0 MediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Weakness
CWE-617
Updated
2026-11-02
OSV 6.0

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).

Record
CVE-2017-12168
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-12168 6.0

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).

Record
DEBIAN-CVE-2017-12168
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHEA-2017:3163 7.0

Red Hat Enhancement Advisory: new packages: kernel-alt

Record
RHEA-2017:3163
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-12168 6.0

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).

Record
UBUNTU-CVE-2017-12168
CVSS 3.1
6.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS 3.0
6.0 MediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.8.11-1
4.8.11-1
linux
Debian:13
 before 4.8.11-1
4.8.11-1
linux
Debian:14
 before 4.8.11-1
4.8.11-1
kernel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-alt
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-debug-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
Show 14 moreShow less
Affected packages
PackageAffectedFixed
kernel-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-headers
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-tools-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
perf
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
python-perf
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.11.0-44.el7a
0:4.11.0-44.el7a

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-12168 is a medium vulnerability (CVSS 6.0) in Linux Kernel, published September 20, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in linux 4.8.11-1.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open