High severity · published Sep 19, 2019
CVE-2019-14821
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation
8.8
CVSS
0.8%
EPSS
No
On KEV
Description
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.6.27 through 3.15.10; 3.16 before 3.16.74; 4.4 before 4.4.194; 4.9 before 4.9.194; 4.14 before 4.14.146; 4.19 before 4.19.75; +3 more · source: NVD
AA
Aff A700s Firmware · Netapp
All versions, or not specified · source: NVD
DA
Data Availability Services · Netapp
All versions, or not specified · source: NVD
DL
Debian Linux · Debian
8.0; 9.0; 10.0 · source: NVD
EL
Enterprise Linux · Redhat
8.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
7.7 · source: NVD
EL
Enterprise Linux For Real Time · Redhat
7; 8 · source: NVD
EL
Enterprise Linux Server · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.7 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
7.7 · source: NVD
EL
Enterprise Linux Workstation · Redhat
6.0; 7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14821
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14821
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html
Third Party Advisory
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
Third Party Advisory
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
Mailing List
http://www.openwall.com/lists/oss-security/2019/09/20/1
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3309
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability
