Unrated severityNVD Advisory· Published Apr 9, 2019· Updated Aug 4, 2024
CVE-2019-3887
CVE-2019-3887
Description
A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
62- osv-coords60 versionspkg:apk/chainguard/hyperv-daemonspkg:apk/chainguard/hyperv-daemons-6.18pkg:apk/chainguard/hyperv-daemons-genericpkg:apk/chainguard/linuxpkg:apk/chainguard/linux-aws-6.12pkg:apk/chainguard/linux-aws-6.12-boot-installedpkg:apk/chainguard/linux-aws-6.12-fips-boot-installedpkg:apk/chainguard/linux-aws-6.12-headerspkg:apk/chainguard/linux-aws-6.12-modulespkg:apk/chainguard/linux-aws-6.18pkg:apk/chainguard/linux-aws-6.18-boot-installedpkg:apk/chainguard/linux-aws-6.18-fips-boot-installedpkg:apk/chainguard/linux-aws-6.18-headerspkg:apk/chainguard/linux-aws-6.18-modulespkg:apk/chainguard/linux-aws-genericpkg:apk/chainguard/linux-aws-generic-boot-configurationpkg:apk/chainguard/linux-aws-generic-boot-installedpkg:apk/chainguard/linux-aws-generic-fips-boot-installedpkg:apk/chainguard/linux-aws-generic-headerspkg:apk/chainguard/linux-aws-generic-modulespkg:apk/chainguard/linux-azure-6.12pkg:apk/chainguard/linux-azure-6.18pkg:apk/chainguard/linux-azure-6.18-boot-installedpkg:apk/chainguard/linux-azure-6.18-fips-boot-installedpkg:apk/chainguard/linux-azure-6.18-headerspkg:apk/chainguard/linux-azure-6.18-modulespkg:apk/chainguard/linux-azure-genericpkg:apk/chainguard/linux-azure-generic-boot-configurationpkg:apk/chainguard/linux-azure-generic-boot-installedpkg:apk/chainguard/linux-azure-generic-fips-boot-installedpkg:apk/chainguard/linux-azure-generic-headerspkg:apk/chainguard/linux-azure-generic-modulespkg:apk/chainguard/linux-boot-configurationpkg:apk/chainguard/linux-boot-installedpkg:apk/chainguard/linux-gcp-6.12pkg:apk/chainguard/linux-gcp-6.18pkg:apk/chainguard/linux-gcp-6.18-boot-installedpkg:apk/chainguard/linux-gcp-6.18-fips-boot-installedpkg:apk/chainguard/linux-gcp-6.18-headerspkg:apk/chainguard/linux-gcp-6.18-modulespkg:apk/chainguard/linux-gcp-genericpkg:apk/chainguard/linux-gcp-generic-boot-installedpkg:apk/chainguard/linux-gcp-generic-fips-boot-installedpkg:apk/chainguard/linux-gcp-generic-headerspkg:apk/chainguard/linux-gcp-generic-modulespkg:apk/chainguard/linux-modulespkg:apk/chainguard/linux-qemu-6.12pkg:apk/chainguard/linux-qemu-6.18pkg:apk/chainguard/linux-qemu-genericpkg:apk/chainguard/linux-qemu-generic-bootc-boot-installedpkg:apk/chainguard/linux-qemu-melangepkg:apk/chainguard/linux-qemu-rcpkg:apk/chainguard/linux-qemu-rc-boot-installedpkg:apk/chainguard/linux-qemu-rc-fips-boot-installedpkg:apk/chainguard/linux-qemu-rc-headerspkg:apk/chainguard/linux-qemu-rc-modulespkg:apk/chainguard/linux-vmware-6.12pkg:apk/chainguard/linux-vmware-6.18pkg:apk/chainguard/linux-vmware-genericpkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
< 0+ 59 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 6.18.5-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 5.14.6-1.4
Patches
Vulnerability mechanics
References
8- access.redhat.com/errata/RHSA-2019:2703mitrevendor-advisory
- access.redhat.com/errata/RHSA-2019:2741mitrevendor-advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWPOIII2L73HV5PGXSGMRMKQIK47UIYE/mitrevendor-advisory
- usn.ubuntu.com/3979-1/mitrevendor-advisory
- usn.ubuntu.com/3980-1/mitrevendor-advisory
- usn.ubuntu.com/3980-2/mitrevendor-advisory
- www.securityfocus.com/bid/107850mitrevdb-entry
- bugzilla.redhat.com/show_bug.cgimitre
News mentions
0No linked articles in our index yet.