An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jan 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-4.14.165-131.185Upgrade perfUpgrade kernel-tools-devel | Apr 27, 2020 | Jan 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Dec 17, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Jan 9, 2020 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Jun 17, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Apr 16, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel | Feb 24, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade perf | Feb 26, 2020 | Jan 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 13, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jan 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Jan 9, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default | Dec 18, 2019 | Dec 17, 2019 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-oracleUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1061-awsUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-kvmUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-gcpUpgrade linux-image-oracle-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcp-edgeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-gke-5.0Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-173-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-5.3.0-40-generic-lpae | Jan 29, 2020 | Dec 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub