CVE-2011-4347: The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel...

Security readout for executives and security teams

This is an old Linux KVM flaw that could let a local host user crash the virtualization host by assigning PCI hardware without proper permission checks. The main business risk is availability loss on affected virtualization hosts, not remote compromise. Exposure is most plausible on legacy Linux virtualization hosts running kernels before 3.1.10 with KVM PCI device assignment available to local users or VM management users. Prioritize remediation for any remaining legacy KVM hosts with shared administration or untrusted local users. Modern supported kernels are likely already fixed, but old virtualization infrastructure should be verified. Mitigation focus: Upgrade to Linux kernel 3.1.10 or a vendor kernel containing the upstream fix.; Check vendor advisories for backported fixes on supported enterprise kernels.; Restrict local access to KVM and virtualization management interfaces..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.