CVE-2012-4461
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace...
1.9 LowFix available
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
Exploit likelihood
0.36%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
- Record
CVE-2012-4461- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
- Record
CVE-2012-4461- Updated
- 2026-11-02
EUVDEUVD-2012-4390 No score
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
- Record
EUVD-2012-4390- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vmj3-p7xv-c3c3 No score
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace...
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
- Record
GHSA-vmj3-p7xv-c3c3- Updated
- 2026-11-02
OSV No score
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
- Record
CVE-2012-4461- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4461 No score
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
- Record
DEBIAN-CVE-2012-4461- Updated
- 2026-11-02
OSVSUSE-SU-2015:0481-1 No score
Security update for Linux kernel
The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to fix a regression introduced by the previous update:
* scsi_dh_alua: Incorrect reference counting in the SCSI ALUA
initialization code lead to system crashes on boot (bnc#858831).
As the update introducing the regression was marked security, this is also marked security even though this bug is not security relevant.
- Record
SUSE-SU-2015:0481-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-4461 No score
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
- Record
UBUNTU-CVE-2012-4461- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.2.35-1 | 3.2.35-1 |
linuxDebian:13 |
before 3.2.35-1 | 3.2.35-1 |
linuxDebian:14 |
before 3.2.35-1 | 3.2.35-1 |
linux-2.6Debian:6.0 |
before 2.6.32-48squeeze3, plus listed versions 2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-32 Show 24 moreShow less2.6.32-332.6.32-342.6.32-34squeeze12.6.32-352.6.32-35squeeze12.6.32-35squeeze22.6.32-35~bpo50+12.6.32-362.6.32-372.6.32-382.6.32-392.6.32-39squeeze12.6.32-402.6.32-412.6.32-41squeeze22.6.32-422.6.32-432.6.32-442.6.32-452.6.32-462.6.32-46squeeze12.6.32-472.6.32-482.6.32-48squeeze1 |
2.6.32-48squeeze3 |
kernelRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
Show 80 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
python-perfRed Hat:enterprise_linux:6::client |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernelRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
python-perfRed Hat:enterprise_linux:6::server |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation |
before 0:2.6.32-279.22.1.el6 | 0:2.6.32-279.22.1.el6 |
kernelRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-bootwrapperRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-debugRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-debug-develRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-debuginfo-common-i686Red Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-debuginfo-common-s390xRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-develRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-docRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-firmwareRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-headersRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-kdumpRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-kdump-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
kernel-kdump-develRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
perfRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
perf-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
python-perfRed Hat:rhel_eus:6.2::server |
before 0:2.6.32-220.38.1.el6 | 0:2.6.32-220.38.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4461 is a low vulnerability (CVSS 1.9) in Linux Kernel, published November 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in linux 3.2.35-1.
References
rhn.redhat.com/errata/RHSA-2013-0223.html
securityfocus.com/bid/56414
bugzilla.redhat.com/show_bug.cgi?id=862900
secunia.com/advisories/51160
git.kernel.org?p=linux/kernel/git/torvalds/linux.git%3Ba=commit%3Bh=6d1068b3a98519247d8ba4ec85cd40ac136dbdf9
Show 194 moreShow less
article.gmane.org/gmane.comp.emulators.kvm.devel/100742
suse.com/support/update/announcement/2012/suse-su-20121679-1.html
openwall.com/lists/oss-security/2012/11/06/14
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.9
lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
nvd.nist.gov/vuln/detail/CVE-2012-4461
github.com/advisories/GHSA-vmj3-p7xv-c3c3
security-tracker.debian.org/tracker/CVE-2012-4461
access.redhat.com/errata/RHSA-2013:0223
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0223.json
cve.org/CVERecord?id=CVE-2012-4398
bugzilla.suse.com/556135
ubuntu.com/security/CVE-2012-4461
This page doesn't list everything
Left out here: 861 references. The JSON record has them.