CVE-2010-0309 describes a denial-of-service vulnerability in the KVM hypervisor, specifically within the Programmable Interval Timer (PIT) emulation in i8254.c. This flaw allows a guest OS user to crash or hang the host OS by attempting to read the /dev/port file due to improper use of the pit_state data structure. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring authenticated access (Au:S) but with low attack complexity (AC:L) to achieve a complete availability impact (A:C). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:linux:kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:S/C:N/I:N/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.
Feb 2, 2010kvm: cat /dev/port in guest cause the host hang
Jan 7, 2010