An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jan 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.165-131.185Upgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Apr 27, 2020 | Jan 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Dec 17, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Jan 9, 2020 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perfUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-devel | Jun 17, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Apr 16, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Feb 24, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libs | Feb 26, 2020 | Jan 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 13, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jan 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Jan 9, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Dec 18, 2019 | Dec 17, 2019 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1071-azureUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-oracle-edgeUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-88-genericUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-gcp-edgeUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-173-genericUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-40-genericUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1061-awsUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-4.4.0-1101-aws | Jan 29, 2020 | Dec 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub