CVE-2012-6031
published 2012-11-23CVE-2012-6031: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host…
PriorityP413medium4.7CVSS 2.0
AVLACMAuNCNINAC
EPSS
0.37%
29.5th percentile
The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the "bad_copy error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xen | < xen 4.1.4-1 (bookworm) | xen 4.1.4-1 (bookworm) |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | >= 0 < 4.1.4-1 | 4.1.4-1 |
| xen | xen | >= 0 < 4.1.4-1 | 4.1.4-1 |
| xen | xen | >= 0 < 4.1.4-1 | 4.1.4-1 |
| xen | xen | >= 0 < 4.1.4-1 | 4.1.4-1 |
CVSS provenance
nvdv2.04.7MEDIUMAV:L/AC:M/Au:N/C:N/I:N/A:C
osv6.9MEDIUM
vendor_debian6.9LOW
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2012-6031: xen - The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and ...
vendor_debian·2012·CVSS 6.9
CVE-2012-6031 [MEDIUM] CVE-2012-6031: xen - The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and ...
The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the "bad_copy error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Scope: local
bookworm: resolved (fixed in 4.1.4-1)
bullseye: resolved (fixed in 4.1.4-1)
forky: resolved (fixed in 4.1.4-1)
sid: resolved (fixed in 4.1.4-1)
trixie: resolved (fixed in 4.1.4-1)
Red Hat
CVE-2012-6031: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4
vendor_redhat·CVSS 6.9
CVE-2012-6031 [MEDIUM] CVE-2012-6031: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4
The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the "bad_copy error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Statement: Not vulnerable.
This issue did not affect the versions of the kernel-xen package as shipped with Red Hat Enterprise Linux 5 because we did not support TMEM (Transcendent Memory).
This issue did not affect Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG as we did not have support for Xen hypervisor.
GHSA
GHSA-jvrg-jfpg-gqx8: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4
ghsa_unreviewed·2022-05-17·CVSS 6.9
CVE-2012-6031 [MEDIUM] CWE-20 GHSA-jvrg-jfpg-gqx8: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4
The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the "bad_copy error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
OSV
CVE-2012-6031: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4
osv·2012-11-23·CVSS 6.9
CVE-2012-6031 [MEDIUM] CVE-2012-6031: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4
The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the "bad_copy error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
No detection rules found.
No public exploits indexed.
http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.htmlhttp://osvdb.org/85199http://secunia.com/advisories/50472http://secunia.com/advisories/55082http://security.gentoo.org/glsa/glsa-201309-24.xmlhttp://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilitieshttp://www.openwall.com/lists/oss-security/2012/09/05/8http://www.securityfocus.com/bid/55410http://www.securitytracker.com/id?1027482https://exchange.xforce.ibmcloud.com/vulnerabilities/78268https://security.gentoo.org/glsa/201604-03http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.htmlhttp://osvdb.org/85199http://secunia.com/advisories/50472http://secunia.com/advisories/55082http://security.gentoo.org/glsa/glsa-201309-24.xmlhttp://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilitieshttp://www.openwall.com/lists/oss-security/2012/09/05/8http://www.securityfocus.com/bid/55410http://www.securitytracker.com/id?1027482https://exchange.xforce.ibmcloud.com/vulnerabilities/78268https://security.gentoo.org/glsa/201604-03
2012-11-23
Published