VULNERABILITY INTELLIGENCE
CVE-2010-0309
CVSS score6.8 NONE
EPSS probability2.77%
CISA KEVNot currently listed
Published2010-02-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:C
Description
The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.
Weakness classification
- nvd@nist.gov: CWE-16