linux linux-kernel CVE-2019-14821 vulnerability in Linux and Other Products
Published on September 19, 2019

product logo product logo product logo product logo product logo product logo product logo product logo
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Weakness Type

What is a Memory Corruption Vulnerability?

The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. The software may modify an index or perform pointer arithmetic that references a memory location that is outside of the boundaries of the buffer. A subsequent write operation then produces undefined or unexpected results.

CVE-2019-14821 has been classified to as a Memory Corruption vulnerability or weakness.


Products Associated with CVE-2019-14821

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-14821 are published in these products:

Linux Kernel
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Virtualization Host
 
Red Hat Enterprise Linux Desktop
 
Red Hat Enterprise Linux Eus
 
Red Hat Enterprise Linux For Real Time
 
Red Hat Enterprise Linux Server
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Server Tus
 
Red Hat Enterprise Linux Workstation
 
Canonical Ubuntu Linux
 
OpenSuse Leap
 
Fedora Project Fedora
 
Debian Linux
 
NetApp Data Availability Services
 
NetApp Hci Management Node
 
NetApp Solidfire
 
Oracle Sd Wan Edge
 
Linux Kernel
 

Affected Versions

Linux Kernel Version all through 5.3 is affected by CVE-2019-14821

Exploit Probability

EPSS
0.10%
Percentile
27.69%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.