A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Sep 17, 2019 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2019 | Sep 17, 2019 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1062Upgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1062_1_1 | Sep 23, 2019 | Sep 17, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-tools-libs | Dec 4, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python-perf | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-headers | Sep 30, 2019 | Sep 17, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 23, 2019 | Sep 17, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2-devel | Sep 21, 2019 | Sep 17, 2019 |
| Ubuntu | — | Upgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-164-genericUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-oracleUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpcUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1094-awsUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1059-azureUpgrade linux-image-snapdragonUpgrade linux-image-serverUpgrade linux-image-highbankUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-omapUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1020-azureUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-genericUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-gkeUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-3.2.0-143-highbankUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.0.0-29-genericUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-generic-paeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency | Sep 19, 2019 | Sep 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub