{"id":"CVE-2011-4347","aliases":["DSA-2443-1","EUVD-2011-4278","GHSA-x4h8-vxmx-gj2j","RHSA-2012:0149","RHSA-2012:0350","RHSA-2012:1042","UBUNTU-CVE-2011-4347"],"status":"published","title":"The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the...","description":"The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.","severity":{"version":"2.0","score":4,"vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00367,"percentile":0.30809,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2011-11-25T00:00:00Z","modified":"2026-06-28T10:05:52Z","fixes":[{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kmod-kvm","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kmod-kvm-debug","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-debuginfo","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-qemu-img","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-tools","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kmod-kvm","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kmod-kvm-debug","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-debuginfo","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-qemu-img","fixed_in":["0:83-249.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-tools","fixed_in":["0:83-249.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-41squeeze2"}]}],"versions":["2.6.32-30","2.6.32-30+m68k.5","2.6.32-31","2.6.32-31~bpo50+1","2.6.32-32","2.6.32-33","2.6.32-34","2.6.32-34squeeze1","2.6.32-35","2.6.32-35squeeze1","2.6.32-35squeeze2","2.6.32-35~bpo50+1","2.6.32-36","2.6.32-37","2.6.32-38","2.6.32-39","2.6.32-39squeeze1","2.6.32-40","2.6.32-41"],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kmod-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kmod-kvm-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::client","package":"kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kmod-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kmod-kvm-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_virtualization:5::server","package":"kvm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:83-249.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-220.7.1.el6"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-bootwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-debuginfo-common-i686","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-debuginfo-common-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.1","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.32-131.29.1.el6"}]}],"bundled":5}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2011/11/24/7","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.10","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=756084","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","report"]},{"url":"https://github.com/torvalds/linux/commit/c4e7f9022e506c6635a5037713c37118e23193e4","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4347","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-x4h8-vxmx-gj2j"},{"url":"https://access.redhat.com/errata/RHSA-2012:0149","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.8_Technical_Notes/kvm.html#RHSA-2012-0149","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=701616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=704081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=753860","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0149.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4347","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4347","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0350","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2011-1530.html","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/kernel.html#RHSA-2012-0350","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=753341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=767914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=789058","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0350.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4077","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4077","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4077","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4081","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4081","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4132","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4132","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4132","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4594","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4594","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4611","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4622","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4622","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4622","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0038","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0207","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2012:1042","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHSA-2011-0928.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=799209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=803793","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1042.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0044","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-1097","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1097","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-1179","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1179","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1179","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2011-4347","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/24/6","tags":["report"]},{"url":"http://thread.gmane.org/gmane.comp.emulators.kvm.devel/82043","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-1389-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1407-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1409-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1405-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1406-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1421-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1422-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1425-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1426-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1431-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1433-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1440-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-4347","description":"The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.","status":"published","published":"2013-06-08T10:00:00Z","modified":"2024-08-07T00:01:51.587Z","updated_at":"2026-11-02T14:35:37.989579Z"}],"euvd":[{"id":"EUVD-2011-4278","description":"The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.","status":"published","published":"2013-06-08T10:00:00Z","modified":"2024-08-07T00:01:51Z","updated_at":"2026-11-03T01:39:48.961231Z"}],"ghsa":[{"id":"GHSA-x4h8-vxmx-gj2j","title":"The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the...","description":"The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.","status":"published","published":"2022-05-17T05:08:45Z","modified":"2023-01-28T05:03:33Z","updated_at":"2026-11-02T14:43:59.810751Z"}],"nvd":[{"id":"CVE-2011-4347","description":"The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation.","status":"published","published":"2013-06-08T13:05:55.517Z","modified":"2026-06-16T23:34:49.15Z","cvss":[{"version":"2.0","score":4,"vector":"AV:L/AC:H/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:12.639283Z"}],"osv":[{"id":"DSA-2443-1","title":"linux-2.6 - several","status":"published","published":"2012-03-26T00:00:00Z","modified":"2026-03-09T01:00:44.065142Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"RHSA-2012:0149","title":"Red Hat Security Advisory: kvm security and bug fix update","status":"published","published":"2024-09-13T07:08:21Z","modified":"2025-11-22T10:35:55Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:0350","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-15T19:43:42Z","modified":"2026-06-28T10:05:52Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:1042","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-13T07:59:16Z","modified":"2025-11-22T10:37:59Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"UBUNTU-CVE-2011-4347","description":"The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host OS users to assign PCI devices and cause a denial of service (host OS crash) via a KVM_ASSIGN_PCI_DEVICE operation. Please note that privileged access was still needed to re-program the device to for example issue DMA requests. This is typically achieved by touching files on sysfs filesystem. These files are usually not accessible to unprivileged users. As a result, local user could use this flaw to crash the system.","status":"withdrawn","published":"2011-11-25T00:00:00Z","modified":"2026-02-04T04:03:56.483668Z","updated_at":"2026-11-02T15:54:06.395274Z"}]}}