CVE-2012-2137: Buffer Overflow
Buffer overflow in virt/kvm/irqcomm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Signaled Interrupts (MSI), irq routing entries, and an incorrect check by the setuproutingentry function before invoking the kvmsetirq function.
Other sources
kvmsetirq() has an internal buffer of three irq routing entries, allowing connecting a GSI to three IRQ chips or on MSI. However setuproutingentry() does not properly enforce this, allowing three irqchip routes followed by an MSI route to overflow the buffer.
An unprivileged local user could use this flaw to crash the system or potentialy escalate their privileges.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2137?
CVE-2012-2137 has been categorized as a high severity vulnerability due to its potential to cause denial of service and may allow arbitrary code execution.
How do I fix CVE-2012-2137?
To fix CVE-2012-2137, update your Linux kernel to version 3.2.25 or higher, or apply the relevant patches if using affected distributions.
Which systems are affected by CVE-2012-2137?
CVE-2012-2137 affects Linux kernel versions prior to 3.2.25, including specific Ubuntu releases like 10.04, 11.10, and 12.04.
What impact does CVE-2012-2137 have on systems?
Exploitation of CVE-2012-2137 can lead to system crashes and potentially allow attackers to execute arbitrary code with elevated privileges.
Is CVE-2012-2137 exploitable remotely?
CVE-2012-2137 is primarily a local vulnerability, meaning it requires local access to the system to be exploited.