In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo | Apr 27, 2020 | Feb 15, 2019 |
| Amazon_linux | — | Upgrade kernel | Mar 5, 2019 | Feb 15, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 1, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Feb 15, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Sep 16, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Apr 30, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo | Mar 11, 2019 | Feb 15, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 24, 2019 | Feb 7, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Feb 15, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-docs | Feb 19, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-47-genericUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-oracleUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1035-awsUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-oemUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-snapdragonUpgrade linux-image-gcpUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1040-aws | Apr 5, 2019 | Feb 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub