PT-2019-20248 · Linux · Linux Kernel

Published 2019-08-03 · Updated 2019-08-03

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1.20

Description A security issue exists where a malicious guest can cause the host to crash or monopolize all of the foreign/grant map pfn space, starving out other guests, by crafting requests to the backend. This occurs because there are no limits on the total amount of memory that dom0 will attempt to balloon down to, nor on the amount of foreign/grant map memory which any individual guest can consume.

Recommendations For Linux kernel version prior to 5.1.20, update to version 5.1.20 or later to resolve the issue.

Related Identifiers

MGASA-2019-0217

Affected Products

Linux Kernel

References · 8

• https://advisories.mageia.org/MGASA-2019-0217.html · Security Note
• https://osv.dev/vulnerability/MGASA-2019-0217 · Vendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.21 · Note
• https://bugs.mageia.org/show_bug.cgi?id=24701 · Note
• https://xenbits.xen.org/xsa/advisory-300.html · Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.20 · Note
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.19 · Note
• https://bugs.mageia.org/show_bug.cgi?id=25185 · Note