An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jan 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.165-131.185Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfo | Apr 27, 2020 | Jan 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2020 | Dec 17, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Jan 9, 2020 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel | Jun 17, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libs | Apr 16, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libs | Feb 24, 2020 | Jan 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade kernel-devel | Feb 26, 2020 | Jan 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 13, 2020 | Dec 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jan 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Jan 9, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Dec 18, 2019 | Dec 17, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcp-edgeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-88-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-gke-5.0Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-oracle-edgeUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-gcpUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-aws-edgeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-awsUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-1011-awsUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-5.3.0-40-genericUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-aws-hwe | Jan 29, 2020 | Dec 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub