An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel | Apr 27, 2020 | Sep 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 27, 2019 | Sep 19, 2019 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kpatch-patch-3_10_0-1062_1_2Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1062_4_1Upgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kpatch-patch-3_10_0-1062Upgrade kpatch-patch-3_10_0-1062_1_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1062_4_3Upgrade kpatch-patch-3_10_0-1062_4_2Upgrade kpatch-patch-3_10_0-1062_1_2-debuginfoUpgrade kpatch-patch-3_10_0-1062_4_1-debuginfo | Nov 6, 2019 | Sep 19, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perf | Dec 4, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-headers | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Sep 30, 2019 | Sep 19, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 19, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Sep 19, 2019 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-default | Oct 11, 2019 | Sep 19, 2019 |
| Ubuntu | — | Upgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1019-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-azureUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1052-awsUpgrade linux-image-oemUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1056-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-4.4.0-166-generic-lpae | Oct 18, 2019 | Sep 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub