CVE-2012-1601: Null Pointer Dereference
If some vcpus are created before KVMCREATEIRQCHIP, then irqchipinkernel() and vcpu->arch.apic will be inconsistent, leading to potential NULL pointer dereferences.
A unprivileged local user could use this flaw to crash the system.
References: http://comments.gmane.org/gmane.comp.emulators.kvm.devel/86217 http://git.kernel.org/?p=virt/kvm/kvm.git;a=commit;h=5b40572ed5f0344b9dbee486a17c589ce1abe1a3
Other sources
The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVMCREATEIRQCHIP ioctl call after a virtual CPU already exists.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1601?
The severity of CVE-2012-1601 is classified as high due to the potential for an unprivileged local user to crash the system.
How do I fix CVE-2012-1601?
To fix CVE-2012-1601, users should upgrade to a patched version of the Linux kernel that addresses this vulnerability.
Who is affected by CVE-2012-1601?
CVE-2012-1601 primarily affects systems running vulnerable versions of the Linux kernel, specifically those before 3.3.6.
What causes the vulnerability CVE-2012-1601?
CVE-2012-1601 is caused by inconsistencies in the irqchip_in_kernel() function and vcpu architecture when certain vCPUs are created before the KVM_CREATE_IRQCHIP command.
Is CVE-2012-1601 a remote exploit?
CVE-2012-1601 is not a remote exploit; it requires local access to the vulnerable system for exploitation.