An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jan 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.165-131.185Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perf | Apr 27, 2020 | Jan 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Dec 17, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Jan 9, 2020 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfo | Jun 17, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headers | Apr 16, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Feb 24, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-sourceUpgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade python3-perf | Feb 26, 2020 | Jan 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 13, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jan 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Jan 9, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Dec 18, 2019 | Dec 17, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-aws-edgeUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-5.3.0-1011-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc-smpUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-azure-edgeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-oracle-edgeUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-4.15.0-1060-awsUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-gcp-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-oracle-lts-18.04 | Jan 29, 2020 | Dec 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub