CVE-2019-14821

HIGH

8.8

CVSS Score

Published: September 19, 2019 at 05:37 PM UTC

Updated: June 17, 2026 at 02:19 AM UTC

38 products affected across 8 vendorsLinux KernelDebian LinuxFedora

Using Kernel by Linux?

Get instant alerts when new vulnerabilities affect Kernel - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 0.8%

Description

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

14.04 16.04 18.04 19.04

Debian Linux · Debiandrupal

95%

10.0 8.0 9.0

Fedora · Fedora Projectrpm

95%

29 30

Linux Kernel · Linux

95%

v ≤ 5.32.6.27 ≤ v ≤ 3.15.103.16 ≤ v < 3.16.744.14 ≤ v < 4.14.1464.19 ≤ v < 4.19.754.4 ≤ v < 4.4.1944.9 ≤ v < 4.9.1945.2 ≤ v < 5.2.175.3 ≤ v < 5.3.15.4 rc1

Affected range stops below 3.16.74, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.14.146, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19.75, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.4.194, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9.194, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.2.17, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.3.1, so it looks safe — our inference, not a vendor statement

Aff A700S Firmware · NetApp

95%

All versions

netapp-aff-a700s (same device)

Data Availability Services · NetApp