First published: Sat Feb 02 2019(Updated: )
A use after free issue was found in the way Linux kernel's KVM hypervisor emulates a preemption timer for L2 guest when nested(=1) virtualization is enabled. This high resolution timer(hrtimer) runs when L2 guest is active. After VM exit, in sync_vmcs12() timer object is stopped. The use-after-free occurs if the timer object is free'd before calling sync_vmcs12() routine. A guest user/process could use this flaw to crash the host kernel resulting in DoS OR potentially gain privileged access to a system. It affects only Intel processors and only when nested virtualization is enabled. Upstream patch: --------------- -> <a href="https://git.kernel.org/linus/ecec76885bcfe3294685dc363fd1273df0d5d65f">https://git.kernel.org/linus/ecec76885bcfe3294685dc363fd1273df0d5d65f</a> Reference: ---------- -> <a href="https://www.openwall.com/lists/oss-security/2019/02/18/2">https://www.openwall.com/lists/oss-security/2019/02/18/2</a>
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Linux kernel | <=4.20.5 | |
openSUSE Leap | =15.0 | |
Fedoraproject Fedora | =28 | |
Fedoraproject Fedora | =29 | |
Debian Debian Linux | =8.0 | |
Canonical Ubuntu Linux | =14.04 | |
Canonical Ubuntu Linux | =16.04 | |
Canonical Ubuntu Linux | =18.04 | |
Canonical Ubuntu Linux | =18.10 | |
Netapp Active Iq Performance Analytics Services | ||
Netapp Element Software Management Node | ||
Redhat Openshift Container Platform | =3.11 | |
Redhat Enterprise Linux | =7.0 | |
Redhat Enterprise Linux Desktop | =7.0 | |
Redhat Enterprise Linux Server | =7.0 | |
Redhat Enterprise Linux Server Aus | =7.6 | |
Redhat Enterprise Linux Server Eus | =7.6 | |
Redhat Enterprise Linux Server Tus | =7.6 | |
Redhat Enterprise Linux Workstation | =7.0 | |
debian/linux | 5.10.223-1 5.10.226-1 6.1.106-3 6.1.112-1 6.11.4-1 6.11.5-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.