CVE-2017-2596

CVE-2017-2596 is a denial-of-service vulnerability affecting the Linux kernel, specifically versions through 4.9.8, within the KVM virtualization component. It arises from improper emulation of the VMXON instruction, allowing a malicious KVM L1 guest OS user to consume host OS memory. Rated 6.5 Medium, the vulnerability has a local attack vector with low attack complexity, leading to high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.