In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Feb 15, 2019 |
| Amazon_linux | — | Upgrade kernel | Mar 5, 2019 | Feb 15, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 1, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Feb 15, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Sep 16, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Apr 30, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perf | Mar 11, 2019 | Feb 15, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 24, 2019 | Feb 7, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Feb 15, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-devel-azure | Feb 19, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.18.0-17-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-aws-hweUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-4.15.0-1035-oemUpgrade linux-image-awsUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-4.18.0-1014-azureUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1035-aws | Apr 5, 2019 | Feb 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub