CVEvulnerability

CVE-2019-7222

5.5 MEDIUM Published 2019-03-21 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2019-03-21
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

Affected configurations

• linux linux kernel (<= 4.20.5) • fedoraproject fedora 28 • fedoraproject fedora 29 • opensuse leap 15.0 • debian debian linux 8.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 18.10 • netapp active iq performance analytics services • netapp element software management node • redhat enterprise linux 8.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux eus 8.1 • redhat enterprise linux eus 8.2 • redhat enterprise linux eus 8.4 • redhat enterprise linux eus 8.6 • redhat enterprise linux for real time 7 • redhat enterprise linux for real time 8 • redhat enterprise linux for real time for nfv 7 • redhat enterprise linux for real time for nfv tus 8.2 • redhat enterprise linux for real time for nfv tus 8.4 • redhat enterprise linux for real time for nfv tus 8.6 • redhat enterprise linux for real time tus 8.2 • redhat enterprise linux for real time tus 8.4 • redhat enterprise linux for real time tus 8.6 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 8.2 • redhat enterprise linux server aus 8.4 • redhat enterprise linux server aus 8.6 • redhat enterprise linux server tus 8.2 • redhat enterprise linux server tus 8.4 • redhat enterprise linux server tus 8.6 • redhat enterprise linux workstation 7.0

References

http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html Broken Link, Mailing List, Third Party Advisory
http://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.html Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2019/02/18/2 Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/106963 Broken Link, Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:2029 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2043 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3309 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3517 Third Party Advisory
https://bugs.chromium.org/p/project-zero/issues/detail?id=1759 Exploit, Patch, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=353c0956a618a07ba4bbe7ad00ff29fe70e8412a Patch, Vendor Advisory
https://github.com/torvalds/linux/commits/master/arch/x86/kvm Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDOXCX3QFVWYXH5CQMGDDE7H6MUG5XGG/ lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/ lists.fedoraproject.org
https://security.netapp.com/advisory/ntap-20190404-0002/ Third Party Advisory
https://usn.ubuntu.com/3930-1/ Third Party Advisory
https://usn.ubuntu.com/3930-2/ Third Party Advisory
https://usn.ubuntu.com/3931-1/ Third Party Advisory
https://usn.ubuntu.com/3931-2/ Third Party Advisory
https://usn.ubuntu.com/3932-1/ Third Party Advisory
https://usn.ubuntu.com/3932-2/ Third Party Advisory
https://usn.ubuntu.com/3933-1/ Third Party Advisory
https://usn.ubuntu.com/3933-2/ Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html Broken Link, Mailing List, Third Party Advisory
http://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.html Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2019/02/18/2 Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/106963 Broken Link, Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:2029 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2043 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3309 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3517 Third Party Advisory
https://bugs.chromium.org/p/project-zero/issues/detail?id=1759 Exploit, Patch, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=353c0956a618a07ba4bbe7ad00ff29fe70e8412a Patch, Vendor Advisory
https://github.com/torvalds/linux/commits/master/arch/x86/kvm Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDOXCX3QFVWYXH5CQMGDDE7H6MUG5XGG/ lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/ lists.fedoraproject.org
https://security.netapp.com/advisory/ntap-20190404-0002/ Third Party Advisory
https://usn.ubuntu.com/3930-1/ Third Party Advisory
https://usn.ubuntu.com/3930-2/ Third Party Advisory
https://usn.ubuntu.com/3931-1/ Third Party Advisory
https://usn.ubuntu.com/3931-2/ Third Party Advisory
https://usn.ubuntu.com/3932-1/ Third Party Advisory
https://usn.ubuntu.com/3932-2/ Third Party Advisory
https://usn.ubuntu.com/3933-1/ Third Party Advisory
https://usn.ubuntu.com/3933-2/ Third Party Advisory