A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Apr 24, 2019 |
| Amazon_linux | — | Upgrade kernel | May 31, 2019 | Apr 24, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Apr 24, 2019 |
| Debian | — | Upgrade linux | May 29, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernelUpgrade kernel-headers | Dec 4, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Nov 19, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-sourceUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Mar 12, 2020 | Apr 24, 2019 |
| Oracle_linux | — | Upgrade kernel | Aug 15, 2019 | Apr 2, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 24, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 7, 2019 | Apr 24, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extra | May 15, 2019 | Apr 24, 2019 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.4.0-148-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-148-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1046-kvmUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-5.0.0-1006-awsUpgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-148-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1083-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-4.4.0-1113-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-50-genericUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-4.4.0-148-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-148-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.0.0-15-genericUpgrade linux-image-4.18.0-20-genericUpgrade linux-image-4.4.0-148-genericUpgrade linux-image-5.0.0-1006-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-148-powerpc64-embUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1038-oemUpgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-4.4.0-1109-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1045-azure | May 15, 2019 | Apr 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub