CVE-2019-14835: canonical ubuntu_linux
Vulnerability summary
CVE-2019-14835 is a high (CVSS 7.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 49.8% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 31 · Related 23Timeline
- 17-09-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVSS metrics
8 scores · 5 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.2HighCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.2HighCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.2HighCVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.62%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.62% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundExploit Reference (openwall.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, administrative account, user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat86 products
- enterprise_linux8.0
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_eus7.5 | 7.6 | 7.7
- enterprise_linux_for_real_time7 | 8
- enterprise_linux_server6.0 | 7.0 | 7.6
Suse46 products
- kernel-livepatch-SLE15_Update_10&distro=SUSE Linux Enterprise Live Patching 15< 4-2.1
- kernel-livepatch-SLE15_Update_11&distro=SUSE Linux Enterprise Live Patching 15< 3-2.1
- kernel-livepatch-SLE15_Update_12&distro=SUSE Linux Enterprise Live Patching 15< 2-2.1
- kernel-livepatch-SLE15_Update_13&distro=SUSE Linux Enterprise Live Patching 15< 2-2.1
- kernel-livepatch-SLE15_Update_5&distro=SUSE Linux Enterprise Live Patching 15< 8-2.1
Ubuntu26 products
- linux< 3.13.0-173.224 | < 4.4.0-164.192 | < 4.15.0-64.73
- linux-aws< 4.4.0-1054.58 | < 4.4.0-1094.105 | < 4.15.0-1050.52
- linux-aws-fips< 4.15.0-2018.18 | All versions (No fix recorded)
- linux-aws-hwe< 4.15.0-1050.52~16.04.1
- linux-azure< 4.15.0-1059.64~14.04.1 | < 4.15.0-1059.64 | < 5.0.0-1020.21~18.04.1
Netapp15 products
Huawei3 products
- imanager_netecov600r009c00 | v600r009c10spc200
- imanager_neteco_6000v600r008c10spc300 | v600r008c20
- manageone6.5.0 | 6.5.0.spc100.b210 | 6.5.1rc1.b060 | 6.5.1rc1.b080 | 6.5.rc2.b050
Debian2 products
- linux< 5.2.17-1
- debian_linuxEOL8.0 | 9.0 | 10.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 18.04 | 19.04
Fedoraproject1 product
- fedoraEOL29 | 30
Linux1 product
- linux_kernel≥ 2.6.34, < 3.16.74 | ≥ 4.4, < 4.4.193 | ≥ 4.9, < 4.9.193 | ≥ 4.14, < 4.14.144 | ≥ 4.19, < 4.19.73 | ≥ 5.2, < 5.2.15 | 5.3
Linux kernel1 product
- linux kernelfrom version 2.6.34 to 5.2.x
Opensuse1 product
- leapEOL15.0 | 15.1
11 vendors · 183 products
References
72 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14835X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2019/09/17/1X Refsource MISCExploitMailing ListPatchThird Party AdvisoryARTICLEREPORT
- access.redhat.com/errata/RHSA-2019:2827Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2828Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2830Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2829Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2854Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2862Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
Show all 72 references
- access.redhat.com/errata/RHSA-2019:2863Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2866Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2864Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2865Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2867Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2869Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- packetstormsecurity.com/files/154572/Kernel-Live-Patch-Security-Notice-LSN-0056-1.htmlX Refsource MISCThird Party AdvisoryVDB Entry
- lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- access.redhat.com/errata/RHSA-2019:2889Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/09/msg00025.htmlMailing ListX Refsource MLISTThird Party Advisory
- access.redhat.com/errata/RHSA-2019:2901Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:2924Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- lists.debian.org/debian-lts-announce/2019/10/msg00000.htmlMailing ListX Refsource MLISTThird Party Advisory
- packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlX Refsource MISCThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlX Refsource MISCThird Party AdvisoryVDB Entry
- www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-qemu-enX Refsource CONFIRMThird Party Advisory