In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Feb 15, 2019 |
| Amazon_linux | — | Upgrade kernel | Mar 5, 2019 | Feb 15, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 1, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Feb 15, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel | Sep 16, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools | Apr 30, 2021 | Feb 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Mar 11, 2019 | Feb 15, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 24, 2019 | Feb 7, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 24, 2019 | Feb 15, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-default-extra | Feb 19, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-3.13.0-168-genericUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.18.0-1012-awsUpgrade linux-image-3.13.0-168-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-azureUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-168-powerpc64-smpUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-3.13.0-168-lowlatencyUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-3.13.0-168-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-3.13.0-168-powerpc-smpUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-168-powerpc-e500Upgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-oracleUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-3.13.0-168-powerpc-e500mcUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-47-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-145-powerpc-smp | Apr 5, 2019 | Feb 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub