NetSight
IP …
medium5.5

CVE-2019-3882

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit.

Impact

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 3.10, 4.14, 4.18
FedoraprojectFedora
All versions
DebianDebian Linux
Versions 8.0, 9.0, 10.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10, 19.04
OpensuseLeap
Versions 15.0, 15.1, 42.3
NetappActive Iq Unified Manager For Vmware Vsphere
from 9.5
NetappHci Management Node
All versions
NetappSnapprotect
All versions
NetappSolidfire
All versions
NetappStorage Replication Adapter For Clustered Data Ontap For Vmware Vsphere
from 7.2
NetappVasa Provider For Clustered Data Ontap
from 7.2
NetappVirtual Storage Console For Vmware Vsphere
from 7.2

Weakness classification

CWE-770

References