vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-18844

HIGH
7.5
CVSS Score
Published: November 13, 2019 at 07:12 PM UTC
Updated: June 17, 2026 at 02:25 AM UTC
1 product affected across 1 vendorAcrn

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 2%

Description

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information), which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions, whereas 2b3dedfb9ba1 is a mitigation for 1.1.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Acrn· Linux
95%
v < 2019w25.5-140000p
Affected range stops below 2019w25.5-140000p, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (5)

x_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://github.com/projectacrn/acrn-hypervisor/commit/2b3dedfb9ba13f15887f22b935d373f36c9a59fa
x_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://github.com/projectacrn/acrn-hypervisor/commit/6199e653418eda58cd698d8769820904453e2535
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://github.com/projectacrn/acrn-hypervisor/compare/acrn-2019w25.4-140000p...acrn-2019w25.5-140000p
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://github.com/projectacrn/acrn-hypervisor/issues/3252
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://github.com/shuox/acrn-hypervisor/commit/97b153237c256c586e528eac7fc2f51aedb2b2fc

CVSS

7.5HIGH[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-617

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card