Vulnerabilities > Linux > Linux Kernel > 3.3

DATE CVE VULNERABILITY TITLE RISK
2013-02-18 CVE-2013-0160 Information Exposure vulnerability in Linux Kernel
The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device.
local
low complexity
linux CWE-200
2.1
2013-02-18 CVE-2012-4398 Improper Input Validation vulnerability in Linux Kernel
The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service (memory consumption) via a crafted application.
local
low complexity
linux CWE-20
4.9
2012-05-17 CVE-2012-2121 Permissions, Privileges, and Access Controls vulnerability in Linux Kernel
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
local
low complexity
linux CWE-264
4.9
2012-05-17 CVE-2012-1601 Resource Management Errors vulnerability in Linux Kernel
The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU already exists.
local
low complexity
linux CWE-399
4.9
2012-05-17 CVE-2012-1179 Permissions, Privileges, and Access Controls vulnerability in Linux Kernel
The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd_none_or_clear_bad function and page faults for huge pages.
5.2