CVE-2012-0045 Denial of service in n/a

Medium 4.7 Published Updated

Guest OS users can crash the guest system via a crafted application due to improper handling of the syscall opcode in the Linux kernel KVM implementation.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2012-0045?

CVE-2012-0045 is a medium-severity denial of service vulnerability in Linux kernel, published on 3 Jul 2012. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.

Which versions are affected by CVE-2012-0045?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2012-0045?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2012-0045 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-0045 exists.

Public exploit code: 1 Exploit-DB entry.

All Linux kernel vulnerabilities

Sources

Also known as GHSA-jq5h-388q-3jvj.

Is CVE-2012-0045 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free