A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfo | Apr 27, 2020 | Sep 17, 2019 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2019 | Sep 17, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1062_1_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kpatch-patch-3_10_0-1062Upgrade kpatch-patch-3_10_0-1062-debuginfo | Sep 23, 2019 | Sep 17, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-devel | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Sep 30, 2019 | Sep 17, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 23, 2019 | Sep 17, 2019 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-source-azure | Sep 21, 2019 | Sep 17, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-3.2.0-143-highbankUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-generic-paeUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-29-genericUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1050-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-omapUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1054-awsUpgrade linux-image-highbankUpgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-serverUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-1059-azureUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-4.4.0-1094-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-64-genericUpgrade linux-image-aws-hweUpgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-powerpcUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04 | Sep 19, 2019 | Sep 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub