Strix
26.1K

CVE-2019-14821

HIGHCVSS 8.8/10EPSS 0.76%

Last modified

CVE-2019-14821 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. EPSS estimates a 0.76% chance of exploitation in the next 30 days.

Description

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.

Metrics

CVSS 3.1
8.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Probability
0.76%

50.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
LinuxLinux Kernel>= 2.6.27, <= 3.15.10—
LinuxLinux Kernel>= 3.16, < 3.16.74—
LinuxLinux Kernel>= 4.4, < 4.4.194—
LinuxLinux Kernel>= 4.9, < 4.9.194—
LinuxLinux Kernel>= 4.14, < 4.14.146—
LinuxLinux Kernel>= 4.19, < 4.19.75—
LinuxLinux Kernel>= 5.2, < 5.2.17—
LinuxLinux Kernel>= 5.3, < 5.3.1—
LinuxLinux Kernel5.4Rc1
RedhatVirtualization Host4.0—
RedhatEnterprise Linux8.0—
RedhatEnterprise Linux Desktop6.0—
RedhatEnterprise Linux Desktop7.0—
RedhatEnterprise Linux Eus7.7—
RedhatEnterprise Linux For Real Time7—
RedhatEnterprise Linux For Real Time8—
RedhatEnterprise Linux Server6.0—
RedhatEnterprise Linux Server7.0—
RedhatEnterprise Linux Server Aus7.7—
RedhatEnterprise Linux Server Tus7.7—
RedhatEnterprise Linux Workstation6.0—
RedhatEnterprise Linux Workstation7.0—
CanonicalUbuntu Linux14.04—
CanonicalUbuntu Linux16.04—
CanonicalUbuntu Linux18.04—
CanonicalUbuntu Linux19.04—
OpensuseLeap15.0—
OpensuseLeap15.1—
FedoraprojectFedora29—
FedoraprojectFedora30—
DebianDebian Linux8.0—
DebianDebian Linux9.0—
DebianDebian Linux10.0—
NetappAff A700s FirmwareAll versions—
NetappH300s FirmwareAll versions—
NetappH500s FirmwareAll versions—
NetappH700s FirmwareAll versions—
NetappH300e FirmwareAll versions—
NetappH500e FirmwareAll versions—
NetappH700e FirmwareAll versions—
NetappH410s FirmwareAll versions—
NetappH410c FirmwareAll versions—
NetappH610s FirmwareAll versions—
NetappData Availability ServicesAll versions—
NetappHci Management NodeAll versions—
NetappSolidfireAll versions—
OracleSd-Wan Edge7.3—
OracleSd-Wan Edge8.0—
OracleSd-Wan Edge8.1—
OracleSd-Wan Edge8.2—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-14821?
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
How severe is CVE-2019-14821?
CVE-2019-14821 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.76% probability of exploitation in the next 30 days.
How do I fix CVE-2019-14821?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-14821?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST