In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel | Apr 27, 2020 | Feb 15, 2019 |
| Amazon_linux | — | Upgrade kernel | Mar 5, 2019 | Feb 15, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 1, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Feb 15, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug | Sep 16, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-devel | Apr 30, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Mar 11, 2019 | Feb 15, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 24, 2019 | Feb 7, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 24, 2019 | Feb 15, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-docs | Feb 19, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-genericUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-144-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-powerpc-e500Upgrade linux-image-4.15.0-1035-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-oracleUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenial | Apr 5, 2019 | Feb 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub