CVEvulnerability

CVE-2019-3887

5.6 MEDIUM Published 2019-04-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-04-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.6 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 3.0 ([email protected])
6.7 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-863

Description

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.

Affected configurations

• linux linux kernel (>= 4.16) • fedoraproject fedora 29 • canonical ubuntu linux 18.04 • canonical ubuntu linux 18.10 • canonical ubuntu linux 19.04 • redhat enterprise linux 8.0 • redhat enterprise linux eus 8.1 • redhat enterprise linux eus 8.2 • redhat enterprise linux eus 8.4 • redhat enterprise linux for real time 8 • redhat enterprise linux for real time for nfv 8 • redhat enterprise linux for real time for nfv tus 8.2 • redhat enterprise linux for real time for nfv tus 8.4 • redhat enterprise linux for real time tus 8.2 • redhat enterprise linux for real time tus 8.4 • redhat enterprise linux server aus 8.2 • redhat enterprise linux server aus 8.4 • redhat enterprise linux server tus 8.2 • redhat enterprise linux server tus 8.4

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References