An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jan 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade perfUpgrade kernel-livepatch-4.14.165-131.185Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Apr 27, 2020 | Jan 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Dec 17, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Jan 9, 2020 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libs | Jun 17, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo | Apr 16, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perf | Feb 24, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Feb 26, 2020 | Jan 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 13, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jan 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Jan 9, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extra | Dec 18, 2019 | Dec 17, 2019 |
| Ubuntu | — | Upgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-oracle-edgeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-88-genericUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-gcp-edgeUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-aws-edgeUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-oemUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-4.15.0-1069-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azureUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1024-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-88-lowlatency | Jan 29, 2020 | Dec 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub