In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-devel | Apr 27, 2020 | Feb 15, 2019 |
| Amazon_linux | — | Upgrade kernel | Mar 5, 2019 | Feb 15, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 1, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Feb 15, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools | Sep 16, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Apr 30, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools | Mar 11, 2019 | Feb 15, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 24, 2019 | Feb 7, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Feb 15, 2019 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-base | Feb 19, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-4.15.0-1035-awsUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-oracleUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-gkeUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1079-awsUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-144-powerpc-e500mc | Apr 5, 2019 | Feb 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub