CVE-2019-3016
CVE-2019-3016
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.2EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
31 Jan 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
linux · linux_kernelWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1792167https://git.kernel.org/linus/1eff70a9abd46f175defafd29bc17ad456f398a7https://git.kernel.org/linus/8c6de56a42e0c657955e12b882a81ef07d1d073ehttps://git.kernel.org/linus/917248144db5d7320655dbb41d3af0b8a0f3d589https://git.kernel.org/linus/a6bd811f1209fe1c64c9f6fd578101d6436c6b6ehttps://git.kernel.org/linus/b043138246a41064527cf019a3d51d9f015e9796https://lore.kernel.org/lkml/1580407316-11391-1-git-send-email-pbonzini%40redhat.com/https://security.netapp.com/advisory/ntap-20200313-0003/https://usn.ubuntu.com/4300-1/https://usn.ubuntu.com/4301-1/https://www.debian.org/security/2020/dsa-4699