CVE-2018-19407

N/A

Published: November 21, 2018 at 12:00 AM UTC

Updated: June 17, 2026 at 01:49 AM UTC

2 products affected across 2 vendorsLinux KernelUbuntu Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.5%

Description

The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic is uninitialized.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

14.04 16.04 18.04 18.10

Linux Kernel · Linux

95%

v ≤ 4.19.2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (12)

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/105987

Mailing Listx_refsource_MLIST

Source: [email protected]

https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html

x_refsource_MISCPatchThird Party Advisory

Source: [email protected]

https://lkml.org/lkml/2018/11/20/580