An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade perf | Apr 27, 2020 | Sep 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 27, 2019 | Sep 19, 2019 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1062_1_1Upgrade kpatch-patch-3_10_0-1062_4_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1062_4_3Upgrade kpatch-patch-3_10_0-1062_4_1Upgrade kpatch-patch-3_10_0-1062_4_2Upgrade kpatch-patch-3_10_0-1062Upgrade kpatch-patch-3_10_0-1062_1_2-debuginfoUpgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kpatch-patch-3_10_0-1062_1_2Upgrade kernel-rt | Nov 6, 2019 | Sep 19, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade python-perf | Dec 4, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade perf | Sep 30, 2019 | Sep 19, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 19, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Sep 19, 2019 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2-extra | Oct 11, 2019 | Sep 19, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1061-azureUpgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1056-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1052-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04 | Oct 18, 2019 | Sep 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub