Out-of-bounds write in Linux kernel - CVE-2019-19332

Vulnerability identifier: #VU28404

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-19332

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local authenticated user to damange or delete data.

An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.

Linux kernel
Amazon Linux AMI
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Slackware Linux
Fedora
android-emulator-hypervisor-driver-for-amd-processors
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel

Install update from vendor's website.

Linux kernel - addressed in versions 4.4.207, 4.9.207, 4.14.159, 4.19.89, 5.5
android-emulator-hypervisor-driver-for-amd-processors - update to 2.2
kernel (Red Hat package) - addressed in versions 3.10.0-1160.el7, 4.18.0-240.el8
kernel-rt (Red Hat package) - update to 3.10.0-1160.rt56.1131.el7
kernel - update to 5.3.16-300.fc31

• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.89
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.16
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.3
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.159
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.207
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.207
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5

• Out-of-bounds write in Linux kernel
• Amazon Linux AMI update for kernel
• Slackware Linux update for Slackware 14.2 kernel
• Multiple vulnerabilities in android-emulator-hypervisor-driver-for-amd-processors
• Red Hat Enterprise Linux 8 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-rt
• Red Hat Enterprise Linux 7 update for kernel
• Fedora 31 update for kernel