The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic is uninitialized.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perf | Apr 27, 2020 | Nov 21, 2018 |
| Amazon_linux | — | Upgrade kernel | Dec 21, 2018 | Nov 20, 2018 |
| Debian | — | Upgrade linux | Mar 15, 2019 | Nov 20, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | Nov 20, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-devel-azure | Jan 18, 2019 | Nov 20, 2018 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-4.4.0-142-powerpc64-smpUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.18.0-1007-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-142-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-142-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-4.18.0-14-generic-lpaeUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-genericUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.18.0-1008-azureUpgrade linux-image-4.4.0-1107-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1038-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.18.0-14-lowlatencyUpgrade linux-image-4.18.0-14-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-142-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.18.0-1009-raspi2Upgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.15.0-44-genericUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.18.0-1008-awsUpgrade linux-image-4.4.0-1103-raspi2Upgrade linux-image-4.4.0-142-powerpc-smpUpgrade linux-image-4.4.0-142-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-14-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.18.0-1006-gcpUpgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-4.4.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-1040-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-oem | Feb 5, 2019 | Nov 20, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 21, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub