An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfo | Apr 27, 2020 | Sep 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 27, 2019 | Sep 19, 2019 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1062Upgrade kernelUpgrade kpatch-patch-3_10_0-1062_4_1-debuginfoUpgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kpatch-patch-3_10_0-1062_1_1Upgrade kpatch-patch-3_10_0-1062_1_2-debuginfoUpgrade kpatch-patch-3_10_0-1062_4_2Upgrade kpatch-patch-3_10_0-1062_4_1Upgrade kpatch-patch-3_10_0-1062_4_3Upgrade kpatch-patch-3_10_0-1062_1_2Upgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kernel-rt | Nov 6, 2019 | Sep 19, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-tools-libs | Dec 4, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-source | Sep 30, 2019 | Sep 19, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 19, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 6, 2019 | Sep 19, 2019 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-obs-build | Oct 11, 2019 | Sep 19, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1019-awsUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-166-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-oemUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1052-awsUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1056-awsUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-4.15.0-1061-azure | Oct 18, 2019 | Sep 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub