An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfo | Apr 27, 2020 | Sep 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 27, 2019 | Sep 19, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1062_1_2Upgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kpatch-patch-3_10_0-1062_1_2-debuginfoUpgrade kpatch-patch-3_10_0-1062_4_3Upgrade kpatch-patch-3_10_0-1062_4_2Upgrade kpatch-patch-3_10_0-1062Upgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1062_4_1-debuginfoUpgrade kpatch-patch-3_10_0-1062_4_1Upgrade kpatch-patch-3_10_0-1062_1_1 | Nov 6, 2019 | Sep 19, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-devel | Dec 4, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-headers | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-sourceUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Sep 30, 2019 | Sep 19, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 19, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 6, 2019 | Sep 19, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-ec2Upgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade kernel-default-extra | Oct 11, 2019 | Sep 19, 2019 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1061-azureUpgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1052-awsUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-4.4.0-1056-awsUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-kvmUpgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-4.4.0-1096-aws | Oct 18, 2019 | Sep 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub