Published: 09/04/2019 Updated: 12/02/2023

CVSS v2 Base Score: 4.7 | Impact Score: 6.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 5.6 | Impact Score: 4 | Exploitability Score: 1.1

VMScore: 418

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
fedoraproject fedora 29
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10
canonical ubuntu linux 19.04
redhat enterprise linux 8.0
redhat enterprise linux eus 8.1
redhat enterprise linux eus 8.2
redhat enterprise linux server tus 8.2
redhat enterprise linux server aus 8.2
redhat enterprise linux for real time 8
redhat enterprise linux server tus 8.4
redhat enterprise linux eus 8.4
redhat enterprise linux for real time for nfv tus 8.4
redhat enterprise linux for real time for nfv tus 8.2
redhat enterprise linux for real time tus 8.4
redhat enterprise linux for real time tus 8.2
redhat enterprise linux server aus 8.4
redhat enterprise linux for real time for nfv 8

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Several security issues were fixed in the Linux kernel ...

Impact: Important Public Date: 2019-04-05 CWE: CWE-284 Bugzilla: 1695044: CVE-2019-3887 Kernel: KVM: nV ...

CWE-863 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3887 http://www.securityfocus.com/bid/107850 https://usn.ubuntu.com/3980-1/https://usn.ubuntu.com/3979-1/https://usn.ubuntu.com/3980-2/https://access.redhat.com/errata/RHSA-2019:2703 https://access.redhat.com/errata/RHSA-2019:2741 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWPOIII2L73HV5PGXSGMRMKQIK47UIYE/https://access.redhat.com/errata/RHSA-2019:2703 https://nvd.nist.gov https://usn.ubuntu.com/3980-1/

CVE-2019-3887

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect