Vulnerability-Lookup

RHSA-2020_2851

Vulnerability from csaf_redhat - Published: 2020-07-07 10:04 - Updated: 2024-11-15 08:32

Summary

Red Hat Security Advisory: kernel security and bug fix update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Count overflow in FUSE request leading to use-after-free issues. (CVE-2019-11487) * Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) * Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888) * kernel: denial of service via ioctl call in network tun handling (CVE-2018-7191) * kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS (CVE-2018-20169) * kernel: perf_event_open() and execve() race in setuid programs allows a data leak (CVE-2019-3901) * kernel: use-after-free in arch/x86/lib/insn-eval.c (CVE-2019-13233) * kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service (CVE-2019-15916) * kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure (CVE-2019-18660) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel: hw: provide reporting and microcode mitigation toggle for CVE-2020-0543 / Special Register Buffer Data Sampling (SRBDS) (BZ#1840677)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2018-7191

A flaw was found in the Linux kernel's implementation of networking tunnel device ioctl. A local attacker can cause a denial of service (NULL pointer dereference and panic) via an ioctl (TUNSETIFF) call with a dev name containing a / character.

6.2 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 345 products

Product	Version	Remediation
Unresolved product id: 7ComputeNode-7.6.EUS:bpftool-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-abi-whitelists-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debuginfo-common-ppc64-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debuginfo-common-ppc64le-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debuginfo-common-s390x-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-debuginfo-common-x86_64-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-doc-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-kdump-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-kdump-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-kdump-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:bpftool-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-abi-whitelists-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debuginfo-common-ppc64-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debuginfo-common-ppc64le-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debuginfo-common-s390x-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-debuginfo-common-x86_64-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-doc-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-kdump-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-kdump-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-kdump-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:bpftool-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-0:3.10.0-957.56.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-abi-whitelists-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debug-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debuginfo-common-ppc64-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debuginfo-common-ppc64le-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debuginfo-common-s390x-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-debuginfo-common-x86_64-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-doc-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-headers-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-headers-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-headers-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-headers-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-kdump-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-kdump-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-kdump-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-libs-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:python-perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:python-perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:python-perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:python-perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:python-perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS-RHV-4.2-Hypervisor-eus:python-perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:bpftool-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-abi-whitelists-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debuginfo-common-ppc64-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debuginfo-common-ppc64le-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debuginfo-common-s390x-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-debuginfo-common-x86_64-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-doc-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-kdump-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-kdump-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-kdump-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:bpftool-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-abi-whitelists-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-bootwrapper-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debug-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debuginfo-common-ppc64-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debuginfo-common-ppc64le-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debuginfo-common-s390x-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-debuginfo-common-x86_64-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-doc-0:3.10.0-957.56.1.el7.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-headers-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-kdump-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-kdump-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-kdump-devel-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-libs-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:kernel-tools-libs-devel-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:python-perf-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.6.EUS:python-perf-debuginfo-0:3.10.0-957.56.1.el7.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2018-20169

A flaw was discovered in the Linux kernel's USB subsystem in the __usb_get_extra_descriptor() function in the drivers/usb/core/usb.c which mishandles a size check during the reading of an extra descriptor data. By using a specially crafted USB device which sends a forged extra descriptor, an unprivileged user with physical access to the system can potentially cause a privilege escalation or trigger a system crash or lock up and thus to cause a denial of service (DoS).

6.4 (Medium)


                
                  CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 345 products, the same list as for CVE-2018-7191

Threats

Impact Moderate

CVE-2019-3901

A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execve() syscall with setuid execution before perf_event_alloc() actually attaches to it, allowing an attacker to bypass the ptrace_may_access() check and the perf_event_exit_task(current) call that is performed in install_exec_creds() during privileged execve() calls.

5.6 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-667 - Improper Locking

Affected products

Fixed 345 products, the same list as for CVE-2018-7191

Threats

Impact Moderate

CVE-2019-11487

A flaw was found in the Linux kernel's implementation of the FUSE filesystem, where it allows a page reference counter overflow. If a page reference counter overflows into a negative value, it can be placed back into the "free" list for reuse by other applications. This flaw allows a local attacker who can manipulate memory page reference counters to cause memory corruption and possible privilege escalation by triggering a use-after-free condition. The current attack requires the system to have approximately 140 GB of RAM for this attack to be performed. It may be possible that the attack can occur with fewer memory requirements.

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 345 products, the same list as for CVE-2018-7191

Threats

Impact Important

CVE-2019-13233

A vulnerability was found in the arch/x86/lib/insn-eval.c function in the Linux kernel. An attacker could corrupt the memory due to a flaw in use-after-free access to an LDT entry caused by a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.

5.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-416 - Use After Free

Affected products

Fixed 345 products, the same list as for CVE-2018-7191

Threats

Impact Moderate

CVE-2019-14821

An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.

7.0 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 345 products, the same list as for CVE-2018-7191

Threats

Impact Important

CVE-2019-15916

A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system.

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 345 products, the same list as for CVE-2018-7191

Threats

Impact Moderate

CVE-2019-18660

A flaw was found in the way the Linux kernel implemented a software flush of the Count Cache (indirect branch cache) and Link (Return Address) Stack on the PowerPC platform. The flushing of these structures helps to prevent SpectreRSB like attacks which may leak information from one user process to another. An unprivileged user could use this flaw to cross the syscall or process boundary and read privileged memory by conducting targeted cache side-channel attacks.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 345 products, the same list as for CVE-2018-7191

Threats

Impact Moderate

CVE-2020-12888

A flaw was found in the Linux kernel, where it allows userspace processes, for example, a guest VM, to directly access h/w devices via its VFIO driver modules. The VFIO modules allow users to enable or disable access to the devices' MMIO memory address spaces. If a user attempts to access the read/write devices' MMIO address space when it is disabled, some h/w devices issue an interrupt to the CPU to indicate a fatal error condition, crashing the system. This flaw allows a guest user or process to crash the host system resulting in a denial of service.

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

CWE-248 - Uncaught Exception

Affected products

Fixed 345 products, the same list as for CVE-2018-7191

Threats

Impact Important

References

49 references

URL	Category
https://access.redhat.com/errata/RHSA-2020:2851	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/solutions/5142691	external
https://bugzilla.redhat.com/show_bug.cgi?id=1660385	external
https://bugzilla.redhat.com/show_bug.cgi?id=1701245	external
https://bugzilla.redhat.com/show_bug.cgi?id=1703063	external
https://bugzilla.redhat.com/show_bug.cgi?id=1716328	external
https://bugzilla.redhat.com/show_bug.cgi?id=1727756	external
https://bugzilla.redhat.com/show_bug.cgi?id=1746708	external
https://bugzilla.redhat.com/show_bug.cgi?id=1750813	external
https://bugzilla.redhat.com/show_bug.cgi?id=1777825	external
https://bugzilla.redhat.com/show_bug.cgi?id=1836244	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2018-7191	self
https://bugzilla.redhat.com/show_bug.cgi?id=1716328	external
https://www.cve.org/CVERecord?id=CVE-2018-7191	external
https://nvd.nist.gov/vuln/detail/CVE-2018-7191	external
https://access.redhat.com/security/cve/CVE-2018-20169	self
https://bugzilla.redhat.com/show_bug.cgi?id=1660385	external
https://www.cve.org/CVERecord?id=CVE-2018-20169	external
https://nvd.nist.gov/vuln/detail/CVE-2018-20169	external
https://access.redhat.com/security/cve/CVE-2019-3901	self
https://bugzilla.redhat.com/show_bug.cgi?id=1701245	external
https://www.cve.org/CVERecord?id=CVE-2019-3901	external
https://nvd.nist.gov/vuln/detail/CVE-2019-3901	external
https://access.redhat.com/security/cve/CVE-2019-11487	self
https://bugzilla.redhat.com/show_bug.cgi?id=1703063	external
https://www.cve.org/CVERecord?id=CVE-2019-11487	external
https://nvd.nist.gov/vuln/detail/CVE-2019-11487	external
https://access.redhat.com/security/cve/CVE-2019-13233	self
https://bugzilla.redhat.com/show_bug.cgi?id=1727756	external
https://www.cve.org/CVERecord?id=CVE-2019-13233	external
https://nvd.nist.gov/vuln/detail/CVE-2019-13233	external
https://access.redhat.com/security/cve/CVE-2019-14821	self
https://bugzilla.redhat.com/show_bug.cgi?id=1746708	external
https://www.cve.org/CVERecord?id=CVE-2019-14821	external
https://nvd.nist.gov/vuln/detail/CVE-2019-14821	external
https://access.redhat.com/security/cve/CVE-2019-15916	self
https://bugzilla.redhat.com/show_bug.cgi?id=1750813	external
https://www.cve.org/CVERecord?id=CVE-2019-15916	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15916	external
https://access.redhat.com/security/cve/CVE-2019-18660	self
https://bugzilla.redhat.com/show_bug.cgi?id=1777825	external
https://www.cve.org/CVERecord?id=CVE-2019-18660	external
https://nvd.nist.gov/vuln/detail/CVE-2019-18660	external
https://access.redhat.com/security/cve/CVE-2020-12888	self
https://bugzilla.redhat.com/show_bug.cgi?id=1836244	external
https://www.cve.org/CVERecord?id=CVE-2020-12888	external
https://nvd.nist.gov/vuln/detail/CVE-2020-12888	external

Acknowledgments

Google.com Matt Delco

JSON

To clipboard

Loading 1.1 MB of JSON…

CVE-2018-20169 (GCVE-0-2018-20169)

Vulnerability from cvelistv5 – Published: 2018-12-17 06:00 – Updated: 2024-08-05 11:51

Summary

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
https://usn.ubuntu.com/3879-2/	vendor-advisoryx_refsource_UBUNTU
http://git.kernel.org/cgit/linux/kernel/git/torva…	x_refsource_MISC
https://usn.ubuntu.com/3879-1/	vendor-advisoryx_refsource_UBUNTU
https://cdn.kernel.org/pub/linux/kernel/v4.x/Chan…	x_refsource_MISC
https://github.com/torvalds/linux/commit/704620af…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4094-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisoryx_refsource_REDHAT

Date Public

2018-12-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:51:19.390Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3879-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3879-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf"
          },
          {
            "name": "USN-3879-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3879-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf"
          },
          {
            "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
          },
          {
            "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
          },
          {
            "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
          },
          {
            "name": "USN-4094-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4094-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "name": "RHSA-2019:3309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-12-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-06T00:07:07.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3879-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3879-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf"
        },
        {
          "name": "USN-3879-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3879-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf"
        },
        {
          "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
        },
        {
          "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
        },
        {
          "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
        },
        {
          "name": "USN-4094-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4094-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "name": "RHSA-2019:3309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3309"
        },
        {
          "name": "RHSA-2019:3517",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3517"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-20169",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3879-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3879-2/"
            },
            {
              "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf",
              "refsource": "MISC",
              "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf"
            },
            {
              "name": "USN-3879-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3879-1/"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf"
            },
            {
              "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
            },
            {
              "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
            },
            {
              "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
            },
            {
              "name": "USN-4094-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4094-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "RHSA-2019:3309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3309"
            },
            {
              "name": "RHSA-2019:3517",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3517"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-20169",
    "datePublished": "2018-12-17T06:00:00.000Z",
    "dateReserved": "2018-12-17T00:00:00.000Z",
    "dateUpdated": "2024-08-05T11:51:19.390Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-7191 (GCVE-0-2018-7191)

Vulnerability from cvelistv5 – Published: 2019-05-17 04:27 – Updated: 2024-08-05 06:24

Summary

In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

11 references

URL	Tags
https://bugs.launchpad.net/ubuntu/+source/linux/+…	x_refsource_MISC
https://bugs.launchpad.net/ubuntu/+source/linux/+…	x_refsource_MISC
https://github.com/torvalds/linux/commit/0ad646c8…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://github.com/torvalds/linux/commit/5c25f65f…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://cdn.kernel.org/pub/linux/kernel/v4.x/Chan…	x_refsource_MISC
http://www.securityfocus.com/bid/108380	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:24:10.508Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1743792"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1748846"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/0ad646c81b2182f7fa67ec0c8c825e0ee165696d"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ad646c81b2182f7fa67ec0c8c825e0ee165696d"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/5c25f65fd1e42685f7ccd80e0621829c105785d9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c25f65fd1e42685f7ccd80e0621829c105785d9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.14"
          },
          {
            "name": "108380",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108380"
          },
          {
            "name": "openSUSE-SU-2019:1479",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
          },
          {
            "name": "openSUSE-SU-2019:1570",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
          },
          {
            "name": "openSUSE-SU-2019:1579",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-06-18T23:06:04.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1743792"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1748846"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/0ad646c81b2182f7fa67ec0c8c825e0ee165696d"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ad646c81b2182f7fa67ec0c8c825e0ee165696d"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/5c25f65fd1e42685f7ccd80e0621829c105785d9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c25f65fd1e42685f7ccd80e0621829c105785d9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.14"
        },
        {
          "name": "108380",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108380"
        },
        {
          "name": "openSUSE-SU-2019:1479",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
        },
        {
          "name": "openSUSE-SU-2019:1570",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
        },
        {
          "name": "openSUSE-SU-2019:1579",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-7191",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1743792",
              "refsource": "MISC",
              "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1743792"
            },
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1748846",
              "refsource": "MISC",
              "url": "https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1748846"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/0ad646c81b2182f7fa67ec0c8c825e0ee165696d",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/0ad646c81b2182f7fa67ec0c8c825e0ee165696d"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ad646c81b2182f7fa67ec0c8c825e0ee165696d",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ad646c81b2182f7fa67ec0c8c825e0ee165696d"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/5c25f65fd1e42685f7ccd80e0621829c105785d9",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/5c25f65fd1e42685f7ccd80e0621829c105785d9"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c25f65fd1e42685f7ccd80e0621829c105785d9",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c25f65fd1e42685f7ccd80e0621829c105785d9"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.14",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.14"
            },
            {
              "name": "108380",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108380"
            },
            {
              "name": "openSUSE-SU-2019:1479",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
            },
            {
              "name": "openSUSE-SU-2019:1570",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
            },
            {
              "name": "openSUSE-SU-2019:1579",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-7191",
    "datePublished": "2019-05-17T04:27:00.000Z",
    "dateReserved": "2018-02-17T00:00:00.000Z",
    "dateUpdated": "2024-08-05T06:24:10.508Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11487 (GCVE-0-2019-11487)

Vulnerability from cvelistv5 – Published: 2019-04-23 22:00 – Updated: 2024-08-04 22:55

Summary

The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

30 references

URL	Tags
http://www.securityfocus.com/bid/108054	vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2019/04/29/1	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4069-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4069-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4115-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:2703	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2741	vendor-advisoryx_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4145-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2020:0174	vendor-advisoryx_refsource_REDHAT
https://security.netapp.com/advisory/ntap-2019051…	x_refsource_CONFIRM
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://github.com/torvalds/linux/commit/6b3a7077…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://github.com/torvalds/linux/commit/15fab63e…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://github.com/torvalds/linux/commit/8fde12ca…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://github.com/torvalds/linux/commit/88b1a17d…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://github.com/torvalds/linux/commit/f958d7b5…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
https://bugs.chromium.org/p/project-zero/issues/d…	x_refsource_MISC
https://lwn.net/Articles/786044/	x_refsource_MISC
https://support.f5.com/csp/article/K14255532	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:55:40.799Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "108054",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108054"
          },
          {
            "name": "[oss-security] 20190429 Linux kernel: multiple issues",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/04/29/1"
          },
          {
            "name": "openSUSE-SU-2019:1570",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
          },
          {
            "name": "openSUSE-SU-2019:1571",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html"
          },
          {
            "name": "openSUSE-SU-2019:1579",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
          },
          {
            "name": "USN-4069-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4069-1/"
          },
          {
            "name": "USN-4069-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4069-2/"
          },
          {
            "name": "USN-4115-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4115-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "name": "RHSA-2019:2703",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2703"
          },
          {
            "name": "RHSA-2019:2741",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2741"
          },
          {
            "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
          },
          {
            "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
          },
          {
            "name": "USN-4145-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4145-1/"
          },
          {
            "name": "RHSA-2020:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0174"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190517-0005/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/6b3a707736301c2128ca85ce85fb13f60b5e350a"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b3a707736301c2128ca85ce85fb13f60b5e350a"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/15fab63e1e57be9fdb5eec1bbc5916e9825e9acb"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15fab63e1e57be9fdb5eec1bbc5916e9825e9acb"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/8fde12ca79aff9b5ba951fce1a2641901b8d8e64"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8fde12ca79aff9b5ba951fce1a2641901b8d8e64"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/88b1a17dfc3ed7728316478fae0f5ad508f50397"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=88b1a17dfc3ed7728316478fae0f5ad508f50397"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/f958d7b528b1b40c44cfda5eabe2d82760d868c3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f958d7b528b1b40c44cfda5eabe2d82760d868c3"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1752"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lwn.net/Articles/786044/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K14255532"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel before 5.1-rc5 allows page-\u003e_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-14T17:20:07.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "108054",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108054"
        },
        {
          "name": "[oss-security] 20190429 Linux kernel: multiple issues",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/04/29/1"
        },
        {
          "name": "openSUSE-SU-2019:1570",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
        },
        {
          "name": "openSUSE-SU-2019:1571",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html"
        },
        {
          "name": "openSUSE-SU-2019:1579",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
        },
        {
          "name": "USN-4069-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4069-1/"
        },
        {
          "name": "USN-4069-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4069-2/"
        },
        {
          "name": "USN-4115-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4115-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "name": "RHSA-2019:2703",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2703"
        },
        {
          "name": "RHSA-2019:2741",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2741"
        },
        {
          "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
        },
        {
          "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
        },
        {
          "name": "USN-4145-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4145-1/"
        },
        {
          "name": "RHSA-2020:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0174"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190517-0005/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/6b3a707736301c2128ca85ce85fb13f60b5e350a"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b3a707736301c2128ca85ce85fb13f60b5e350a"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/15fab63e1e57be9fdb5eec1bbc5916e9825e9acb"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15fab63e1e57be9fdb5eec1bbc5916e9825e9acb"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/8fde12ca79aff9b5ba951fce1a2641901b8d8e64"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8fde12ca79aff9b5ba951fce1a2641901b8d8e64"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/88b1a17dfc3ed7728316478fae0f5ad508f50397"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=88b1a17dfc3ed7728316478fae0f5ad508f50397"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/f958d7b528b1b40c44cfda5eabe2d82760d868c3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f958d7b528b1b40c44cfda5eabe2d82760d868c3"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1752"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lwn.net/Articles/786044/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K14255532"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-11487",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux kernel before 5.1-rc5 allows page-\u003e_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "108054",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108054"
            },
            {
              "name": "[oss-security] 20190429 Linux kernel: multiple issues",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/04/29/1"
            },
            {
              "name": "openSUSE-SU-2019:1570",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
            },
            {
              "name": "openSUSE-SU-2019:1571",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html"
            },
            {
              "name": "openSUSE-SU-2019:1579",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
            },
            {
              "name": "USN-4069-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4069-1/"
            },
            {
              "name": "USN-4069-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4069-2/"
            },
            {
              "name": "USN-4115-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4115-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "RHSA-2019:2703",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2703"
            },
            {
              "name": "RHSA-2019:2741",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2741"
            },
            {
              "name": "[debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html"
            },
            {
              "name": "[debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html"
            },
            {
              "name": "USN-4145-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4145-1/"
            },
            {
              "name": "RHSA-2020:0174",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0174"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190517-0005/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190517-0005/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/6b3a707736301c2128ca85ce85fb13f60b5e350a",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/6b3a707736301c2128ca85ce85fb13f60b5e350a"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b3a707736301c2128ca85ce85fb13f60b5e350a",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b3a707736301c2128ca85ce85fb13f60b5e350a"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/15fab63e1e57be9fdb5eec1bbc5916e9825e9acb",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/15fab63e1e57be9fdb5eec1bbc5916e9825e9acb"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15fab63e1e57be9fdb5eec1bbc5916e9825e9acb",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15fab63e1e57be9fdb5eec1bbc5916e9825e9acb"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/8fde12ca79aff9b5ba951fce1a2641901b8d8e64",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/8fde12ca79aff9b5ba951fce1a2641901b8d8e64"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8fde12ca79aff9b5ba951fce1a2641901b8d8e64",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8fde12ca79aff9b5ba951fce1a2641901b8d8e64"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/88b1a17dfc3ed7728316478fae0f5ad508f50397",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/88b1a17dfc3ed7728316478fae0f5ad508f50397"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=88b1a17dfc3ed7728316478fae0f5ad508f50397",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=88b1a17dfc3ed7728316478fae0f5ad508f50397"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/f958d7b528b1b40c44cfda5eabe2d82760d868c3",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/f958d7b528b1b40c44cfda5eabe2d82760d868c3"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f958d7b528b1b40c44cfda5eabe2d82760d868c3",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f958d7b528b1b40c44cfda5eabe2d82760d868c3"
            },
            {
              "name": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1752",
              "refsource": "MISC",
              "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1752"
            },
            {
              "name": "https://lwn.net/Articles/786044/",
              "refsource": "MISC",
              "url": "https://lwn.net/Articles/786044/"
            },
            {
              "name": "https://support.f5.com/csp/article/K14255532",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K14255532"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-11487",
    "datePublished": "2019-04-23T22:00:44.000Z",
    "dateReserved": "2019-04-23T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:55:40.799Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-13233 (GCVE-0-2019-13233)

Vulnerability from cvelistv5 – Published: 2019-07-04 12:27 – Updated: 2024-08-04 23:49

Summary

In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
https://bugs.chromium.org/p/project-zero/issues/d…	x_refsource_MISC
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://github.com/torvalds/linux/commit/de9f8696…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.netapp.com/advisory/ntap-2019080…	x_refsource_CONFIRM
https://www.debian.org/security/2019/dsa-4495	vendor-advisoryx_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Aug/13	mailing-listx_refsource_BUGTRAQ
https://usn.ubuntu.com/4093-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4094-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4117-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
http://packetstormsecurity.com/files/154408/Kerne…	x_refsource_MISC
https://support.f5.com/csp/article/K13331647?utm_…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisoryx_refsource_REDHAT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:49:23.910Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1879"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
          },
          {
            "name": "openSUSE-SU-2019:1757",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190806-0001/"
          },
          {
            "name": "DSA-4495",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4495"
          },
          {
            "name": "20190812 [SECURITY] [DSA 4495-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Aug/13"
          },
          {
            "name": "USN-4093-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4093-1/"
          },
          {
            "name": "USN-4094-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4094-1/"
          },
          {
            "name": "USN-4117-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4117-1/"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K13331647?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "name": "RHSA-2019:3309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-06T00:07:09.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1879"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
        },
        {
          "name": "openSUSE-SU-2019:1757",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190806-0001/"
        },
        {
          "name": "DSA-4495",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4495"
        },
        {
          "name": "20190812 [SECURITY] [DSA 4495-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Aug/13"
        },
        {
          "name": "USN-4093-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4093-1/"
        },
        {
          "name": "USN-4094-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4094-1/"
        },
        {
          "name": "USN-4117-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4117-1/"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K13331647?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "name": "RHSA-2019:3309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3309"
        },
        {
          "name": "RHSA-2019:3517",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3517"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13233",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1879",
              "refsource": "MISC",
              "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1879"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.9",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.9"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de9f869616dd95e95c00bdd6b0fcd3421e8a4323",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de9f869616dd95e95c00bdd6b0fcd3421e8a4323"
            },
            {
              "name": "openSUSE-SU-2019:1757",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190806-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190806-0001/"
            },
            {
              "name": "DSA-4495",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2019/dsa-4495"
            },
            {
              "name": "20190812 [SECURITY] [DSA 4495-1] linux security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Aug/13"
            },
            {
              "name": "USN-4093-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4093-1/"
            },
            {
              "name": "USN-4094-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4094-1/"
            },
            {
              "name": "USN-4117-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4117-1/"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K13331647?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K13331647?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "RHSA-2019:3309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3309"
            },
            {
              "name": "RHSA-2019:3517",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3517"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13233",
    "datePublished": "2019-07-04T12:27:00.000Z",
    "dateReserved": "2019-07-04T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:49:23.910Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-14821 (GCVE-0-2019-14821)

Vulnerability from cvelistv5 – Published: 2019-09-19 17:37 – Updated: 2024-08-05 00:26

Summary

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H

CWE

CWE-787

Assigner

redhat redhat root

References

29 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2019/09/20/1	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://seclists.org/bugtraq/2019/Sep/41	mailing-listx_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4531	vendor-advisoryx_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2019100…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4157-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4162-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4157-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4163-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4163-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4162-2/	vendor-advisoryx_refsource_UBUNTU
http://packetstormsecurity.com/files/154951/Kerne…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisoryx_refsource_REDHAT
https://seclists.org/bugtraq/2019/Nov/11	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155212/Slack…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:3978	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3979	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4154	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4256	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0027	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0204	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Linux	Kernel	Affected: all through 5.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:26:39.131Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14821"
          },
          {
            "name": "[oss-security] 20190920 CVE-2019-14821 Kernel: KVM: OOB memory access via mmio ring buffer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/09/20/1"
          },
          {
            "name": "FEDORA-2019-15e141c6a7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRZQQQANZWQMPILZV7OTS3RGGRLLE2Q7/"
          },
          {
            "name": "[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html"
          },
          {
            "name": "20190925 [SECURITY] [DSA 4531-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Sep/41"
          },
          {
            "name": "DSA-4531",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2019/dsa-4531"
          },
          {
            "name": "[debian-lts-announce] 20191001 [SECURITY] [DLA 1940-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html"
          },
          {
            "name": "FEDORA-2019-a570a92d5a",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YW3QNMPENPFEGVTOFPSNOBL7JEIJS25P/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191004-0001/"
          },
          {
            "name": "openSUSE-SU-2019:2307",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html"
          },
          {
            "name": "openSUSE-SU-2019:2308",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html"
          },
          {
            "name": "USN-4157-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4157-1/"
          },
          {
            "name": "USN-4162-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4162-1/"
          },
          {
            "name": "USN-4157-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4157-2/"
          },
          {
            "name": "USN-4163-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4163-1/"
          },
          {
            "name": "USN-4163-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4163-2/"
          },
          {
            "name": "USN-4162-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4162-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html"
          },
          {
            "name": "RHSA-2019:3309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          },
          {
            "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/11"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "RHSA-2019:3978",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3978"
          },
          {
            "name": "RHSA-2019:3979",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3979"
          },
          {
            "name": "RHSA-2019:4154",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4154"
          },
          {
            "name": "RHSA-2019:4256",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4256"
          },
          {
            "name": "RHSA-2020:0027",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0027"
          },
          {
            "name": "RHSA-2020:0204",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0204"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "all through 5.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel\u0027s KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer \u0027struct kvm_coalesced_mmio\u0027 object, wherein write indices \u0027ring-\u003efirst\u0027 and \u0027ring-\u003elast\u0027 value could be supplied by a host user-space process. An unprivileged host user or process with access to \u0027/dev/kvm\u0027 device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T21:06:51.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14821"
        },
        {
          "name": "[oss-security] 20190920 CVE-2019-14821 Kernel: KVM: OOB memory access via mmio ring buffer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/09/20/1"
        },
        {
          "name": "FEDORA-2019-15e141c6a7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRZQQQANZWQMPILZV7OTS3RGGRLLE2Q7/"
        },
        {
          "name": "[debian-lts-announce] 20190925 [SECURITY] [DLA 1930-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html"
        },
        {
          "name": "20190925 [SECURITY] [DSA 4531-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Sep/41"
        },
        {
          "name": "DSA-4531",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2019/dsa-4531"
        },
        {
          "name": "[debian-lts-announce] 20191001 [SECURITY] [DLA 1940-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html"
        },
        {
          "name": "FEDORA-2019-a570a92d5a",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YW3QNMPENPFEGVTOFPSNOBL7JEIJS25P/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191004-0001/"
        },
        {
          "name": "openSUSE-SU-2019:2307",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html"
        },
        {
          "name": "openSUSE-SU-2019:2308",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html"
        },
        {
          "name": "USN-4157-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4157-1/"
        },
        {
          "name": "USN-4162-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4162-1/"
        },
        {
          "name": "USN-4157-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4157-2/"
        },
        {
          "name": "USN-4163-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4163-1/"
        },
        {
          "name": "USN-4163-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4163-2/"
        },
        {
          "name": "USN-4162-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4162-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html"
        },
        {
          "name": "RHSA-2019:3309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3309"
        },
        {
          "name": "RHSA-2019:3517",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3517"
        },
        {
          "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/11"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "name": "RHSA-2019:3978",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3978"
        },
        {
          "name": "RHSA-2019:3979",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3979"
        },
        {
          "name": "RHSA-2019:4154",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4154"
        },
        {
          "name": "RHSA-2019:4256",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4256"
        },
        {
          "name": "RHSA-2020:0027",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0027"
        },
        {
          "name": "RHSA-2020:0204",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0204"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-14821",
    "datePublished": "2019-09-19T17:37:24.000Z",
    "dateReserved": "2019-08-10T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:26:39.131Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-15916 (GCVE-0-2019-15916)

Vulnerability from cvelistv5 – Published: 2019-09-04 14:58 – Updated: 2024-08-05 01:03

Summary

An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019100…	x_refsource_CONFIRM
https://support.f5.com/csp/article/K57418558?utm_…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2020:0740	vendor-advisoryx_refsource_REDHAT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:03:31.885Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=895a5e96dbd6386c8e78e5b78e067dcc67b7f0ab"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191004-0001/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K57418558?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "name": "RHSA-2019:3309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "RHSA-2020:0740",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0740"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-11T11:06:07.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=895a5e96dbd6386c8e78e5b78e067dcc67b7f0ab"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191004-0001/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K57418558?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "name": "RHSA-2019:3309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3309"
        },
        {
          "name": "RHSA-2019:3517",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3517"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "RHSA-2020:0740",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0740"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-15916",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=895a5e96dbd6386c8e78e5b78e067dcc67b7f0ab",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=895a5e96dbd6386c8e78e5b78e067dcc67b7f0ab"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191004-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191004-0001/"
            },
            {
              "name": "https://support.f5.com/csp/article/K57418558?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K57418558?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "RHSA-2019:3309",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3309"
            },
            {
              "name": "RHSA-2019:3517",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3517"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "RHSA-2020:0740",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0740"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-15916",
    "datePublished": "2019-09-04T14:58:01.000Z",
    "dateReserved": "2019-09-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:03:31.885Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-18660 (GCVE-0-2019-18660)

Vulnerability from cvelistv5 – Published: 2019-11-27 22:11 – Updated: 2024-08-05 01:54

Summary

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

18 references

URL	Tags
https://www.openwall.com/lists/oss-security/2019/…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2019/11/27/1	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://usn.ubuntu.com/4228-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4227-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4226-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4225-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4228-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4227-2/	vendor-advisoryx_refsource_UBUNTU
https://seclists.org/bugtraq/2020/Jan/10	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155890/Slack…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2020:0174	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/4225-2/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:54:14.648Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2019/11/27/1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39e72bf96f5847ba87cc5bd7a3ce0fed813dc9ad"
          },
          {
            "name": "[oss-security] 20191128 CVE-2019-18660: Linux kernel: powerpc: missing Spectre-RSB mitigation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/11/27/1"
          },
          {
            "name": "FEDORA-2019-b86a7bdba0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.1"
          },
          {
            "name": "FEDORA-2019-124a241044",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
          },
          {
            "name": "USN-4228-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4228-1/"
          },
          {
            "name": "USN-4227-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4227-1/"
          },
          {
            "name": "USN-4226-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4226-1/"
          },
          {
            "name": "USN-4225-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4225-1/"
          },
          {
            "name": "USN-4228-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4228-2/"
          },
          {
            "name": "USN-4227-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4227-2/"
          },
          {
            "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/10"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "RHSA-2020:0174",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0174"
          },
          {
            "name": "USN-4225-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4225-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-23T17:06:07.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2019/11/27/1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39e72bf96f5847ba87cc5bd7a3ce0fed813dc9ad"
        },
        {
          "name": "[oss-security] 20191128 CVE-2019-18660: Linux kernel: powerpc: missing Spectre-RSB mitigation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/11/27/1"
        },
        {
          "name": "FEDORA-2019-b86a7bdba0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.1"
        },
        {
          "name": "FEDORA-2019-124a241044",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
        },
        {
          "name": "USN-4228-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4228-1/"
        },
        {
          "name": "USN-4227-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4227-1/"
        },
        {
          "name": "USN-4226-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4226-1/"
        },
        {
          "name": "USN-4225-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4225-1/"
        },
        {
          "name": "USN-4228-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4228-2/"
        },
        {
          "name": "USN-4227-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4227-2/"
        },
        {
          "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/10"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "name": "RHSA-2020:0174",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0174"
        },
        {
          "name": "USN-4225-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4225-2/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18660",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.openwall.com/lists/oss-security/2019/11/27/1",
              "refsource": "MISC",
              "url": "https://www.openwall.com/lists/oss-security/2019/11/27/1"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39e72bf96f5847ba87cc5bd7a3ce0fed813dc9ad",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=39e72bf96f5847ba87cc5bd7a3ce0fed813dc9ad"
            },
            {
              "name": "[oss-security] 20191128 CVE-2019-18660: Linux kernel: powerpc: missing Spectre-RSB mitigation",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/11/27/1"
            },
            {
              "name": "FEDORA-2019-b86a7bdba0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
            },
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.1",
              "refsource": "CONFIRM",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.1"
            },
            {
              "name": "FEDORA-2019-124a241044",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
            },
            {
              "name": "USN-4228-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4228-1/"
            },
            {
              "name": "USN-4227-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4227-1/"
            },
            {
              "name": "USN-4226-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4226-1/"
            },
            {
              "name": "USN-4225-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4225-1/"
            },
            {
              "name": "USN-4228-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4228-2/"
            },
            {
              "name": "USN-4227-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4227-2/"
            },
            {
              "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/10"
            },
            {
              "name": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
            },
            {
              "name": "RHSA-2020:0174",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0174"
            },
            {
              "name": "USN-4225-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4225-2/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-18660",
    "datePublished": "2019-11-27T22:11:42.000Z",
    "dateReserved": "2019-11-02T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:54:14.648Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-3901 (GCVE-0-2019-3901)

Vulnerability from cvelistv5 – Published: 2019-04-22 15:22 – Updated: 2024-08-04 19:26

Summary

Severity

5.6 (Medium)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE

CWE-667

Assigner

redhat redhat root

References

5 references

URL	Tags
http://www.securityfocus.com/bid/89937	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://security.netapp.com/advisory/ntap-2019051…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
The Linux Foundation	kernel	Affected: older then 4.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:26:26.688Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "89937",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/89937"
          },
          {
            "name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"
          },
          {
            "name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-2] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190517-0005/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3901"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel",
          "vendor": "The Linux Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "older then 4.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execve() syscall with setuid execution before perf_event_alloc() actually attaches to it, allowing an attacker to bypass the ptrace_may_access() check and the perf_event_exit_task(current) call that is performed in install_exec_creds() during privileged execve() calls. This issue affects kernel versions before 4.8."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-667",
              "description": "CWE-667",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-04T18:00:59.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "89937",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/89937"
        },
        {
          "name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"
        },
        {
          "name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-2] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190517-0005/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3901"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-3901",
    "datePublished": "2019-04-22T15:22:15.000Z",
    "dateReserved": "2019-01-03T00:00:00.000Z",
    "dateUpdated": "2024-08-04T19:26:26.688Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-12888 (GCVE-0-2020-12888)

Vulnerability from cvelistv5 – Published: 2020-05-15 17:02 – Updated: 2024-08-04 12:11

Summary

The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

13 references

URL	Tags
https://lore.kernel.org/kvm/158871570274.15589.10…	x_refsource_MISC
https://lore.kernel.org/kvm/158871401328.15589.17…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2020/05/19/6	mailing-listx_refsource_MLIST
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2020060…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4526-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4525-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T12:11:18.700Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/kvm/158871570274.15589.10563806532874116326.stgit%40gimli.home/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/kvm/158871401328.15589.17598154478222071285.stgit%40gimli.home/"
          },
          {
            "name": "[oss-security] 20200519 CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2020/05/19/6"
          },
          {
            "name": "FEDORA-2020-57bf620276",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXGMJHWTMQI34NJZ4BHL3ZVF264AWBF2/"
          },
          {
            "name": "FEDORA-2020-5436586091",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBEHRQQZTKJTPQFPY3JAO7MQ4JAFEQNW/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200608-0001/"
          },
          {
            "name": "openSUSE-SU-2020:0935",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html"
          },
          {
            "name": "openSUSE-SU-2020:1153",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html"
          },
          {
            "name": "USN-4526-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4526-1/"
          },
          {
            "name": "USN-4525-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4525-1/"
          },
          {
            "name": "[debian-lts-announce] 20200928 [SECURITY] [DLA 2385-1] linux-4.19 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html"
          },
          {
            "name": "[debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html"
          },
          {
            "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-10-31T17:06:22.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/kvm/158871570274.15589.10563806532874116326.stgit%40gimli.home/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/kvm/158871401328.15589.17598154478222071285.stgit%40gimli.home/"
        },
        {
          "name": "[oss-security] 20200519 CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2020/05/19/6"
        },
        {
          "name": "FEDORA-2020-57bf620276",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXGMJHWTMQI34NJZ4BHL3ZVF264AWBF2/"
        },
        {
          "name": "FEDORA-2020-5436586091",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBEHRQQZTKJTPQFPY3JAO7MQ4JAFEQNW/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200608-0001/"
        },
        {
          "name": "openSUSE-SU-2020:0935",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html"
        },
        {
          "name": "openSUSE-SU-2020:1153",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html"
        },
        {
          "name": "USN-4526-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4526-1/"
        },
        {
          "name": "USN-4525-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4525-1/"
        },
        {
          "name": "[debian-lts-announce] 20200928 [SECURITY] [DLA 2385-1] linux-4.19 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html"
        },
        {
          "name": "[debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html"
        },
        {
          "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-12888",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lore.kernel.org/kvm/158871570274.15589.10563806532874116326.stgit@gimli.home/",
              "refsource": "MISC",
              "url": "https://lore.kernel.org/kvm/158871570274.15589.10563806532874116326.stgit@gimli.home/"
            },
            {
              "name": "https://lore.kernel.org/kvm/158871401328.15589.17598154478222071285.stgit@gimli.home/",
              "refsource": "MISC",
              "url": "https://lore.kernel.org/kvm/158871401328.15589.17598154478222071285.stgit@gimli.home/"
            },
            {
              "name": "[oss-security] 20200519 CVE-2020-12888 Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2020/05/19/6"
            },
            {
              "name": "FEDORA-2020-57bf620276",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NXGMJHWTMQI34NJZ4BHL3ZVF264AWBF2/"
            },
            {
              "name": "FEDORA-2020-5436586091",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CBEHRQQZTKJTPQFPY3JAO7MQ4JAFEQNW/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200608-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200608-0001/"
            },
            {
              "name": "openSUSE-SU-2020:0935",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html"
            },
            {
              "name": "openSUSE-SU-2020:1153",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html"
            },
            {
              "name": "USN-4526-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4526-1/"
            },
            {
              "name": "USN-4525-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4525-1/"
            },
            {
              "name": "[debian-lts-announce] 20200928 [SECURITY] [DLA 2385-1] linux-4.19 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html"
            },
            {
              "name": "[debian-lts-announce] 20201030 [SECURITY] [DLA 2420-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html"
            },
            {
              "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-12888",
    "datePublished": "2020-05-15T17:02:20.000Z",
    "dateReserved": "2020-05-15T00:00:00.000Z",
    "dateUpdated": "2024-08-04T12:11:18.700Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2020_2851

CVE-2018-20169 (GCVE-0-2018-20169)

CVE-2018-7191 (GCVE-0-2018-7191)

CVE-2019-11487 (GCVE-0-2019-11487)

CVE-2019-13233 (GCVE-0-2019-13233)

CVE-2019-14821 (GCVE-0-2019-14821)

CVE-2019-15916 (GCVE-0-2019-15916)

CVE-2019-18660 (GCVE-0-2019-18660)

CVE-2019-3901 (GCVE-0-2019-3901)

CVE-2020-12888 (GCVE-0-2020-12888)

Tags

Sightings

Nomenclature

Related by attack behaviour