CVE-2012-1601

CVE-2012-1601 describes a denial-of-service vulnerability in the KVM implementation of the Linux kernel prior to version 3.3.6. A local attacker can trigger a NULL pointer dereference, leading to a host OS crash, by issuing a specific KVM_CREATE_IRQCHIP ioctl call after a virtual CPU is already present. This vulnerability has a CVSS score of 4.9, indicating a low-complexity local attack with high impact on availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.