● CVE — Medium
CVE-2019-3882
Vendordebian, fedoraproject, linux, canonical, opensuseProductdebian linux, fedora, linux kernel, ubuntu linux, leap, vasa provider for clustered data ontap, solidfire, hci management node, cn1610 firmware, snapprotect, active iq unified manager for vmware vsphere, storage replication adapter for clustered data ontap for vmware vsphere, virtual storage console for vmware vsphereDiscoveredApr 24, 2019UpdatedNov 21, 2024
A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.