{"id":"CVE-2010-0435","aliases":["DSA-2153-1","EUVD-2010-0466","GHSA-xqcg-6633-64hg","RHSA-2010:0622","RHSA-2010:0627"],"status":"published","title":"The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83,...","description":"The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00359,"percentile":0.29806,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2010-08-24T17:00:00Z","modified":"2026-06-29T10:03:34Z","affected":[{"source":"osv","ecosystem":"Debian:5.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.26-26lenny2"}]}],"versions":["2.6.26-13","2.6.26-13lenny2","2.6.26-13lenny2~bpo40+1","2.6.26-14","2.6.26-15","2.6.26-15lenny1","2.6.26-15lenny2","2.6.26-15lenny3","2.6.26-15~bpo40+1","2.6.26-15~bpo40+2","2.6.26-16","2.6.26-17","2.6.26-17lenny1","2.6.26-17lenny2","2.6.26-17lenny2~bpo40+1","2.6.26-17~bpo40+1","2.6.26-18","2.6.26-19","2.6.26-19lenny1","2.6.26-19lenny2","2.6.26-19~bpo40+1","2.6.26-20","2.6.26-20~bpo40+1","2.6.26-21","2.6.26-21lenny1","2.6.26-21lenny2","2.6.26-21lenny3","2.6.26-21lenny4","2.6.26-21~bpo40+1","2.6.26-22","2.6.26-22lenny1","2.6.26-23","2.6.26-24","2.6.26-24lenny1","2.6.26-25","2.6.26-25lenny1","2.6.26-26","2.6.26-26lenny1"],"bundled":20},{"source":"osv","ecosystem":"Debian:5.0","package":"user-mode-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.26-1um-2+26lenny2"}]}],"versions":["2.6.26-1um-2","2.6.26-1um-2+15","2.6.26-1um-2+15lenny2","2.6.26-1um-2+15lenny3","2.6.26-1um-2+16","2.6.26-1um-2+17lenny1","2.6.26-1um-2+17lenny2","2.6.26-1um-2+19","2.6.26-1um-2+19lenny1","2.6.26-1um-2+21","2.6.26-1um-2+21lenny3","2.6.26-1um-2+21lenny4","2.6.26-1um-2+22lenny1","2.6.26-1um-2+24","2.6.26-1um-2+24lenny1","2.6.26-1um-2+25lenny1","2.6.26-1um-2+26","2.6.26-1um-2+26lenny1"],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::hypervisor","package":"rhev-hypervisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-2.2.6.1.el5_5rhev2_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::hypervisor","package":"rhev-hypervisor-pxe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5-2.2.6.1.el5_5rhev2_2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kmod-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kmod-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-164.el5_5.21"}]}],"bundled":3}],"products":[{"vendor":"redhat","product":"enterprise_virtualization"},{"vendor":"redhat","product":"kvm"}],"references":[{"url":"https://rhn.redhat.com/errata/RHSA-2010-0627.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/42778","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0622.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=570528","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.vupen.com/english/advisories/2011/0012","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0435","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0622","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0627","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0435","tags":["report"]},{"url":"https://github.com/advisories/GHSA-xqcg-6633-64hg"},{"url":"http://www.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization_for_Servers/2.2/html/Technical_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=568699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=568701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=568809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=619411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=622928","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0622.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0428","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0429","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0431","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0435","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2784","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2811","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2811","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2811","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=610342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=610343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=616796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=618205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=618206","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0627.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-0435","description":"The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.","status":"published","published":"2010-08-24T17:00:00Z","modified":"2024-08-07T00:52:17.396Z","updated_at":"2026-11-02T14:33:30.359814Z"}],"euvd":[{"id":"EUVD-2010-0466","description":"The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.","status":"published","published":"2010-08-24T17:00:00Z","modified":"2024-08-07T00:52:17Z","updated_at":"2026-11-03T01:39:45.195177Z"}],"ghsa":[{"id":"GHSA-xqcg-6633-64hg","title":"The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83,...","description":"The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.","status":"published","published":"2022-05-02T06:12:42Z","modified":"2023-02-10T05:06:34Z","updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2010-0435","description":"The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.","status":"published","published":"2010-08-24T18:00:38.927Z","modified":"2026-06-16T23:16:10.433Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:52.227027Z"}],"osv":[{"id":"DSA-2153-1","title":"linux-2.6 - several issues","status":"published","published":"2011-01-30T00:00:00Z","modified":"2026-03-09T01:20:42.637354Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2010:0622","title":"Red Hat Security Advisory: rhev-hypervisor security and bug fix update","status":"published","published":"2024-09-13T06:47:08Z","modified":"2026-06-29T10:03:32Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2010:0627","title":"Red Hat Security Advisory: kvm security and bug fix update","status":"published","published":"2024-09-13T06:47:24Z","modified":"2026-06-29T10:03:34Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}