A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf | Apr 27, 2020 | Sep 17, 2019 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2019 | Sep 17, 2019 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1062_1_1Upgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1062Upgrade kpatch-patch-3_10_0-1062-debuginfo | Sep 23, 2019 | Sep 17, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo | Dec 4, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headers | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-sourceUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools | Sep 30, 2019 | Sep 17, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 23, 2019 | Sep 17, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-ec2Upgrade kernel-azure-base | Sep 21, 2019 | Sep 17, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-serverUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-awsUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-highbankUpgrade linux-image-4.4.0-1094-awsUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-oemUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-omapUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-4.4.0-164-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1059-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-powerpcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-29-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-generic-paeUpgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-azureUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-3.2.0-143-highbankUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-5.0.0-29-lowlatency | Sep 19, 2019 | Sep 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub