CVE-2010-0309: Linux Kernel

Medium severity, CVSS 6.8. EPSS: 2.8% chance of exploitation in the next 30 days.

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file.

Affected products

• Linux Kernel: any version

Published 2010-02-12. Last modified 2026-06-16.