Unscored severity · published Aug 31, 2015
CVE-2015-3214
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
through 2.6.32 · source: NVD
DL
Debian Linux · Debian
7.0; 8.0 · source: NVD
EP
Emc Px12-400r Ivx · Lenovo
before 1.0.10.33264 · source: NVD
EP
Emc Px12-450r Ivx · Lenovo
before 1.0.10.33264 · source: NVD
EL
Enterprise Linux Compute Node Eus · Redhat
7.1; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more · source: NVD
EL
Enterprise Linux For Power Big Endian · Redhat
7.0 · source: NVD
EL
Enterprise Linux For Power Big Endian Eus · Redhat
7.1_ppc64; 7.2_ppc64; 7.3_ppc64; 7.4_ppc64; 7.5_ppc64; 7.6_ppc64; +1 more · source: NVD
EL
Enterprise Linux For Scientific Computing · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.3; 7.4; 7.6; 7.7 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.1; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more · source: NVD
EL
Enterprise Linux Server From Rhui · Redhat
7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-3214
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-3214
Patch
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924
Broken Link
http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33
Issue Tracking
http://rhn.redhat.com/errata/RHSA-2015-1507.html
Issue Tracking
http://rhn.redhat.com/errata/RHSA-2015-1508.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1512.html
Issue Tracking
http://www.debian.org/security/2015/dsa-3348
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability