Denial Of Service (DoS)

2021-06-0313:43:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.6%

JSON

kernel is vulnerable to denial of service. The vulnerability exists due to the ability for an attacker to map the value of internal.ndata in the KVM API to an array index which can be updated by the user process at anytime leading to an out-of-bound write which can crash the system.

CPENameOperatorVersion
kernel-rteq4.18.0__257.rt7.22.el8
kernel-rteq4.18.0__277.rt7.42.el8
kernel-rteq4.18.0__193.13.2.rt13.65.el8_2
kernel-rteq4.18.0__236.rt7.49.el8
kernel-rteq4.18.0__193.12.1.rt13.63.el8_2
kernel-rteq4.18.0__294.rt7.61.el8
kernel-rteq4.18.0__302.1.rt7.70.el8
kernel-rteq4.18.0__269.rt7.34.el8
kernel-rteq4.18.0__259.rt7.24.el8
kernel-rteq4.18.0__240.rt7.54.el8

Name	Operator	Version
kernel-rt	eq	4.18.0__257.rt7.22.el8
kernel-rt	eq	4.18.0__277.rt7.42.el8
kernel-rt	eq	4.18.0__193.13.2.rt13.65.el8_2
kernel-rt	eq	4.18.0__236.rt7.49.el8
kernel-rt	eq	4.18.0__193.12.1.rt13.63.el8_2
kernel-rt	eq	4.18.0__294.rt7.61.el8
kernel-rt	eq	4.18.0__302.1.rt7.70.el8
kernel-rt	eq	4.18.0__269.rt7.34.el8
kernel-rt	eq	4.18.0__259.rt7.24.el8
kernel-rt	eq	4.18.0__240.rt7.54.el8