An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernel | Apr 27, 2020 | Sep 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Sep 27, 2019 | Sep 19, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kpatch-patch-3_10_0-1062_1_2Upgrade kpatch-patch-3_10_0-1062_1_2-debuginfoUpgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kpatch-patch-3_10_0-1062_4_1Upgrade kpatch-patch-3_10_0-1062_4_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1062_1_1Upgrade kpatch-patch-3_10_0-1062Upgrade kpatch-patch-3_10_0-1062_4_3Upgrade kpatch-patch-3_10_0-1062_4_2 | Nov 6, 2019 | Sep 19, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debug | Dec 4, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-devel | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libs | Nov 19, 2019 | Sep 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-source | Sep 30, 2019 | Sep 19, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 19, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 6, 2019 | Sep 19, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-devel-azureUpgrade kernel-ec2Upgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-source-azure | Oct 11, 2019 | Sep 19, 2019 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1023-azureUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-166-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-66-genericUpgrade linux-image-4.4.0-166-powerpc-smpUpgrade linux-image-4.4.0-1124-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1096-awsUpgrade linux-image-5.0.0-1019-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-32-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1020-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-166-powerpc64-smpUpgrade linux-image-5.0.0-1023-gkeUpgrade linux-image-4.15.0-1027-oracleUpgrade linux-image-4.15.0-66-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1047-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-166-genericUpgrade linux-image-4.15.0-1048-kvmUpgrade linux-image-4.4.0-1060-kvmUpgrade linux-image-5.0.0-1024-snapdragonUpgrade linux-image-4.15.0-1059-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1128-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1061-azureUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1021-gcpUpgrade linux-image-4.4.0-1056-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1046-gkeUpgrade linux-image-5.0.0-32-generic-lpaeUpgrade linux-image-5.0.0-32-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1066-snapdragonUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1020-raspi2Upgrade linux-image-4.15.0-1052-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1049-raspi2Upgrade linux-image-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-166-powerpc-e500mcUpgrade linux-image-4.15.0-66-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-166-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.4.0-166-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04 | Oct 18, 2019 | Sep 19, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub