A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools | Apr 27, 2020 | Sep 17, 2019 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2019 | Sep 17, 2019 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1062Upgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kernel-rtUpgrade kernelUpgrade kpatch-patch-3_10_0-1062_1_1Upgrade kpatch-patch-3_10_0-1062_1_1-debuginfo | Sep 23, 2019 | Sep 17, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libs | Dec 4, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libs | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-sourceUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Sep 30, 2019 | Sep 17, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 23, 2019 | Sep 17, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-ec2Upgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-ec2-extra | Sep 21, 2019 | Sep 17, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-paeUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-genericUpgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-5.0.0-29-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-3.2.0-143-highbankUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-omapUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-powerpc-e500Upgrade linux-image-oracleUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-4.15.0-64-genericUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-serverUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-highbankUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-164-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1094-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpcUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1059-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragon | Sep 19, 2019 | Sep 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub