A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Apr 27, 2020 | Sep 17, 2019 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2019 | Sep 17, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1062_1_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1062_1_1Upgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kpatch-patch-3_10_0-1062 | Sep 23, 2019 | Sep 17, 2019 |
| Debian | — | Upgrade linux | Sep 25, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-tools | Dec 4, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-devel | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-devel | Nov 19, 2019 | Sep 17, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-headersUpgrade python-perf | Sep 30, 2019 | Sep 17, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 21, 2019 | Sep 17, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 17, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 23, 2019 | Sep 17, 2019 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-devel-azure | Sep 21, 2019 | Sep 17, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1050-awsUpgrade linux-image-3.2.0-143-highbankUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1126-snapdragonUpgrade linux-image-4.4.0-164-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.2.0-143-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1017-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-29-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-gke-5.0Upgrade linux-image-3.13.0-173-generic-lpaeUpgrade linux-image-5.0.0-1020-azureUpgrade linux-image-4.15.0-1064-snapdragonUpgrade linux-image-4.15.0-1056-oemUpgrade linux-image-5.0.0-1017-gcpUpgrade linux-image-3.2.0-143-generic-paeUpgrade linux-image-5.0.0-29-genericUpgrade linux-image-3.2.0-143-omapUpgrade linux-image-4.15.0-1025-oracleUpgrade linux-image-3.13.0-173-lowlatencyUpgrade linux-image-3.2.0-143-powerpc64-smpUpgrade linux-image-3.13.0-173-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-generic-paeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1044-gcpUpgrade linux-image-4.4.0-164-powerpc-smpUpgrade linux-image-5.0.0-1016-awsUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1021-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-164-lowlatencyUpgrade linux-image-3.2.0-143-genericUpgrade linux-image-4.15.0-64-lowlatencyUpgrade linux-image-3.13.0-173-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1059-azureUpgrade linux-image-serverUpgrade linux-image-4.15.0-64-generic-lpaeUpgrade linux-image-5.0.0-1017-kvmUpgrade linux-image-4.4.0-164-genericUpgrade linux-image-4.4.0-1122-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1094-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1058-kvmUpgrade linux-image-3.13.0-173-genericUpgrade linux-image-4.15.0-1047-raspi2Upgrade linux-image-4.15.0-1046-kvmUpgrade linux-image-highbankUpgrade linux-image-4.15.0-64-genericUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-3.13.0-173-powerpc64-embUpgrade linux-image-3.2.0-143-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1017-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-29-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-3.13.0-173-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-oracleUpgrade linux-image-4.4.0-164-generic-lpaeUpgrade linux-image-3.13.0-173-powerpc-e500Upgrade linux-image-4.15.0-1044-gkeUpgrade linux-image-4.4.0-164-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-omapUpgrade linux-image-4.4.0-164-powerpc-e500mc | Sep 19, 2019 | Sep 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub