PT-2019-2980 · Linux+4 · Linux Kernel+4

Marc Orr · Published 2019-04-05 · Updated 2024-06-15 · CVE-2019-3887

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.16 and newer

Description The issue is related to a flaw in the KVM hypervisor's handling of x2APIC Machine Specific Register (MSR) access with nested virtualization enabled, allowing a guest to potentially access the host's APIC register values and crash the host kernel, resulting in a denial of service.

Recommendations For Linux Kernel versions 4.16 and newer, update to a version that includes a fix for this issue to prevent potential denial of service attacks.

Fix

DoS

Incorrect Authorization

RCE

Improper Access Control

Weakness Enumeration

CWE-863

CWE-20

CWE-284

Related Identifiers

ALT-PU-2019-1663

ALT-PU-2019-1664

ALT-PU-2019-1665

ALT-PU-2019-1666

AZL-34854

AZL-6521

BDU:2019-02958

CESA-2019_2703

CESA-2019_2741

CVE-2019-3887

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

RHSA-2019:2703

RHSA-2019:2741

RHSA-2019_2703

RHSA-2019_2741

USN-3979-1

USN-3980-1

USN-3980-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

References · 239

• https://osv.dev/vulnerability/openSUSE-SU-2024:13704-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2741 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3980-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02958 · Security Note
• https://ubuntu.com/security/CVE-2018-16884 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3887 · Vendor Advisory
• https://usn.ubuntu.com/3980-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-3887 · Security Note
• https://usn.ubuntu.com/3980-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-3887 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/IWPOIII2L73HV5PGXSGMRMKQIK47UIYE · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWPOIII2L73HV5PGXSGMRMKQIK47UIYE · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3874 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3882 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3887 · Patch