CVE-2014-8369: Debian Linux

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601.

Affected products

• Debian Debian Linux: version 7.0 only
• Linux Linux Kernel: up to and including 3.17.2
• Opensuse Evergreen: version 11.4 only
• Suse Linux Enterprise Real Time Extension: version 11 only
• Suse Suse Linux Enterprise Server: version 11 only

Published 2014-11-10. Last modified 2026-06-17.