● CVE — High
CVE-2019-14835
Vendordebian, fedoraproject, linux, netapp, canonicalProductdebian linux, fedora, linux kernel, h300e firmware, h300s firmware, h410c firmware, h410s firmware, h500e firmware, h500s firmware, h610s firmware, h700e firmware, h700s firmware, ubuntu linux, enterprise linux, enterprise linux eus, openshift container platform, leap, enterprise linux desktop, enterprise linux for real time, steelstore cloud integrated storage, solidfire, hci management node, service processor, aff a700s firmware, data availability servicesDiscoveredSep 17, 2019UpdatedNov 21, 2024
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.