A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 11, 2019 | Apr 9, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 21, 2020 | Apr 5, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 9, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 11, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-20-genericUpgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-1006-awsUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-5.0.0-1006-azureUpgrade linux-image-awsUpgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-5.0.0-15-genericUpgrade linux-image-gkeUpgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-emb | May 15, 2019 | Apr 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub