CVE-2014-3611
kernel: kvm: PIT timer race condition
Severity
ImportantRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · October 21, 2014
Updated · June 27, 2026
Description
A race condition flaw was found in the way the Linux kernel's KVM subsystem handled PIT (Programmable Interval Timer) emulation. A guest user who has access to the PIT I/O ports could use this flaw to crash the host.
Statement
This issue does affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6 and 7. This issue does affect the kvm packages as shipped with Red Hat Enterprise Linux 5. Future updates may address this issue in the respective Red Hat Enterprise Linux releases.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 5.5AV:A/AC:L/Au:S/C:N/I:N/A:C
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')