CVE-2019-14821

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14821	Issue Tracking Mitigation
http://www.openwall.com/lists/oss-security/2019/09/20/1	Mailing List Patch
https://www.debian.org/security/2019/dsa-4531	Third Party Advisory
https://seclists.org/bugtraq/2019/Sep/41	Issue Tracking Mailing List
https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html	Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20191004-0001/	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html	Mailing List Third Party Advisory
https://usn.ubuntu.com/4157-1/	Third Party Advisory
https://usn.ubuntu.com/4157-2/	Third Party Advisory
https://usn.ubuntu.com/4162-1/	Third Party Advisory
https://usn.ubuntu.com/4163-1/	Third Party Advisory
https://usn.ubuntu.com/4163-2/	Third Party Advisory
https://usn.ubuntu.com/4162-2/	Third Party Advisory
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2019:3517	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3309	Third Party Advisory
https://seclists.org/bugtraq/2019/Nov/11	Mailing List Third Party Advisory
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2019:3978	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3979	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4154	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4256	Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0027	Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0204	Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRZQQQANZWQMPILZV7OTS3RGGRLLE2Q7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YW3QNMPENPFEGVTOFPSNOBL7JEIJS25P/

Configuration 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.4:rc1:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:sd-wan_edge:8.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:sd-wan_edge:7.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:sd-wan_edge:8.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:sd-wan_edge:8.1:*:*:*:*:*:*:*

---

Published : 2019-09-19 06:15

Updated : 2023-02-12 11:34

---

NVD link : CVE-2019-14821

Mitre link : CVE-2019-14821

Redhat

Virtualization Host

CWE-787