A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this flaw to crash the system, corrupt memory, or create other adverse security affects.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-devel | Apr 27, 2020 | Jul 30, 2019 |
| Amazon_linux | — | Upgrade kernel | May 31, 2019 | May 29, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade perf | Nov 19, 2019 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Nov 19, 2019 | Jul 30, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-157-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1088-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1117-raspi2Upgrade linux-image-4.4.0-157-genericUpgrade linux-image-4.4.0-157-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-157-powerpc64-embUpgrade linux-image-4.4.0-157-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-157-lowlatencyUpgrade linux-image-4.4.0-157-powerpc64-smpUpgrade linux-image-4.4.0-1052-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic | Jul 26, 2019 | May 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub