Wind River Support Network

HomeDefectsLIN1018-3553
Fixed

LIN1018-3553 : Security Advisory - linux - CVE-2019-7222

Created: Feb 14, 2019    Updated: Mar 26, 2019
Resolved Date: Mar 6, 2019
Found In Version: unknown
Fix Version: 10.18.44.5
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Kernel

Description

An information leakage issue was found in the way Linux kernel's KVM hypervisor handled page fault exception while emulating instructions like VMXON, VMCLEAR, VMPTRLD, VMWRITE with memory address as an operand. It occurs if the operand is an mmio address, as the returned exception object holds uninitialised stack memory Contents.

https://nvd.nist.gov/vuln/detail/CVE-2019-7222 

CVEs


Live chat
Online