PT-2019-20248 · Linux · Linux Kernel

Publicado 2019-08-03 · Atualizado 2019-08-03

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1.20

Description A security issue exists where a malicious guest can cause the host to crash or monopolize all of the foreign/grant map pfn space, starving out other guests, by crafting requests to the backend. This occurs because there are no limits on the total amount of memory that dom0 will attempt to balloon down to, nor on the amount of foreign/grant map memory which any individual guest can consume.

Recommendations For Linux kernel version prior to 5.1.20, update to version 5.1.20 or later to resolve the issue.

Identificadores relacionados

MGASA-2019-0217

Produtos afetados

Linux Kernel

Referências · 8

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.21 · Nota
• https://advisories.mageia.org/MGASA-2019-0217.html · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=24701 · Nota
• https://xenbits.xen.org/xsa/advisory-300.html · Nota
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.20 · Nota
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.19 · Nota
• https://osv.dev/vulnerability/MGASA-2019-0217 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=25185 · Nota