CVE-2014-3601
The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.
Key facts
- CVSS score
- 4.3 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:A/AC:H/Au:S/C:N/I:N/A:C- Weakness (CWE)
- CWE-189
- EPSS score
- 1.2% (68th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2014-3570)
- Published
- September 1, 2014
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2014-3570 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- canonical / ubuntu linux
- canonical / ubuntu linux
- linux / linux kernel
- linux / linux kernel
- opensuse / evergreen
- suse / linux enterprise real time extension
- suse / linux enterprise server
- suse / suse linux enterprise server
Certified products that may be affected
2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- SUSE Linux Enterprise Server 11 Service Pack 2 on IBM System z - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0852-2013 - archived
- SUSE Linux Enterprise Server 11 Service Pack 2 including KVM virtualization - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0787-2013 - archived
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html(Third Party Advisory)
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html(Third Party Advisory)
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html(Third Party Advisory)
- http://secunia.com/advisories/60830
- http://www.securityfocus.com/bid/69489
- http://www.ubuntu.com/usn/USN-2356-1(Third Party Advisory)
- http://www.ubuntu.com/usn/USN-2357-1(Third Party Advisory)
- http://www.ubuntu.com/usn/USN-2358-1(Third Party Advisory)
- http://www.ubuntu.com/usn/USN-2359-1(Third Party Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=1131951(Issue Tracking)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95689
- https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7(Exploit, Patch)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain