CVE-2019-3887

MEDIUM

Linux Kernel >= 4.16 - Denial of Service via KVM x2APIC MSR Access

Title source: llm
STIX 2.1

Description

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/107850
Third Party Advisory vendor-advisory
https://usn.ubuntu.com/3980-1/
Third Party Advisory vendor-advisory
https://usn.ubuntu.com/3979-1/
Third Party Advisory vendor-advisory
https://usn.ubuntu.com/3980-2/
Third Party Advisory vendor-advisory
https://access.redhat.com/errata/RHSA-2019:2703
Third Party Advisory vendor-advisory
https://access.redhat.com/errata/RHSA-2019:2741
Issue Tracking, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3887

Scores

CVSS v3 5.6
EPSS 0.0004
EPSS Percentile 11.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Details

CWE
CWE-863
Status published
Products (19)
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 18.10
canonical/ubuntu_linux 19.04
fedoraproject/fedora 29
linux/linux_kernel 4.16
redhat/enterprise_linux 8.0
redhat/enterprise_linux_eus 8.1
redhat/enterprise_linux_eus 8.2
redhat/enterprise_linux_eus 8.4
redhat/enterprise_linux_for_real_time 8
... and 9 more
Published Apr 09, 2019
Tracked Since Feb 18, 2026