CVE-2011-4622: The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not prop...

Security readout for executives and security teams

This is an old KVM virtualization bug where a local user could crash a system by triggering a PIT timer path when no virtual interrupt controller is available. The documented impact is denial of service, not data theft or remote takeover. Exposure is most likely on older Linux/KVM virtualization hosts or distributions that had not applied the 2012 vendor kernel/KVM fixes. The source bundle does not provide a complete affected-version matrix. Treat this as a legacy virtualization availability risk. It is important for environments with old KVM hosts, but urgency is lower where supported kernels are patched and local access is tightly controlled. Mitigation focus: Apply relevant Red Hat or SUSE kernel/KVM security updates where applicable.; Check current vendor guidance for exact affected packages and replacement versions.; Restrict untrusted local access to KVM hosts and virtualization management interfaces..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.