A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headers | Apr 27, 2020 | Apr 24, 2019 |
| Amazon_linux | — | Upgrade kernel | May 31, 2019 | Apr 24, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 24, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Dec 4, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Nov 19, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perf | Mar 12, 2020 | Apr 24, 2019 |
| Oracle_linux | — | Upgrade kernel | Aug 15, 2019 | Apr 2, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 24, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Apr 24, 2019 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | May 15, 2019 | Apr 24, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1039-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-4.18.0-20-genericUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1006-azureUpgrade linux-image-4.4.0-148-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-148-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1045-azureUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-148-genericUpgrade linux-image-5.0.0-15-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1109-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-4.4.0-148-generic-lpaeUpgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-4.15.0-1038-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-4.4.0-148-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1113-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1046-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-4.4.0-148-powerpc64-smpUpgrade linux-image-4.15.0-50-genericUpgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-148-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-5.0.0-1006-awsUpgrade linux-image-4.15.0-1013-oracle | May 15, 2019 | Apr 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub