CVE-2012-2121
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the...
4.9 Medium
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
Exploit likelihood
0.41%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
- Record
CVE-2012-2121- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
- Record
CVE-2012-2121- Updated
- 2026-11-02
EUVDEUVD-2012-2123 No score
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
- Record
EUVD-2012-2123- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c72r-fqqv-r8jm No score
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the...
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
- Record
GHSA-c72r-fqqv-r8jm- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2121 No score
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
- Record
UBUNTU-CVE-2012-2121- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:6.0 From an advisory covering 36 CVEs |
before 2.6.32-48squeeze3, plus listed versions 2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-32 Show 24 moreShow less2.6.32-332.6.32-342.6.32-34squeeze12.6.32-352.6.32-35squeeze12.6.32-35squeeze22.6.32-35~bpo50+12.6.32-362.6.32-372.6.32-382.6.32-392.6.32-39squeeze12.6.32-402.6.32-412.6.32-41squeeze22.6.32-422.6.32-432.6.32-442.6.32-452.6.32-462.6.32-46squeeze12.6.32-472.6.32-482.6.32-48squeeze1 |
2.6.32-48squeeze3 |
kmod-kvmRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kmod-kvm-debugRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kvmRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kvm-debuginfoRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kvm-qemu-imgRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kvm-toolsRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kmod-kvmRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kmod-kvm-debugRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kvmRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
Show 68 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kvm-debuginfoRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kvm-qemu-imgRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kvm-toolsRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:83-249.el5_8.4 | 0:83-249.el5_8.4 |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2121 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published May 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.
References
secunia.com/advisories/50732
rhn.redhat.com/errata/RHSA-2012-0743.html
securitytracker.com/id?1027083
openwall.com/lists/oss-security/2012/04/19/16
bugzilla.redhat.com/show_bug.cgi?id=814149
github.com/torvalds/linux/commit/09ca8e1173bcb12e2a449698c9ae3b86a8a10195
Show 69 moreShow less
ubuntu.com/usn/USN-1577-1
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4
nvd.nist.gov/vuln/detail/CVE-2012-2121
access.redhat.com/errata/RHSA-2012:0676
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0676.json
cve.org/CVERecord?id=CVE-2012-1601
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/kernel.html
ubuntu.com/security/CVE-2012-2121
lkml.org/lkml/2012/4/11/248