An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jan 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.165-131.185Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perf | Apr 27, 2020 | Jan 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Dec 17, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Jan 9, 2020 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo | Jun 17, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade perf | Apr 16, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Feb 24, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernel-sourceUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headers | Feb 26, 2020 | Jan 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 13, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jan 9, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Jan 9, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Dec 18, 2019 | Dec 17, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-aws-edgeUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-173-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-edgeUpgrade linux-image-genericUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-powerpc64-emb | Jan 29, 2020 | Dec 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub