CVE-2019-7222 — Sensitive Information Exposure in Kernel

CWE-200 — Sensitive Information Exposure19 documents9 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 87.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
16
Linux KernelCanonical Ubuntu LinuxDebian Linux+13 more
Timeline
PublishedMar 21
Latest updateMay 13

Description

The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

▶Debianlinux/linux_kernel< 4.19.20-1+3
▶NVDlinux/linux_kernel4.20.5

Also affects: Debian Linux 8.0, Ubuntu Linux 12.04, 14.04, 16.04, 18.04, 18.10, Enterprise Linux 8.0, 8.1, 8.2, 8.4, 8.6, 7, 8, Fedora 28, 29

Patches

Patch: www.openwall.com ↗Patch: bugs.chromium.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

6
GHSA
GHSA-57xj-x7jh-222m: The KVM implementation in the Linux kernel through 4↗2022-05-13
▶
OSV
CVE-2019-7222: The KVM implementation in the Linux kernel through 4↗2019-03-21
▶
CVEList
CVE-2019-7222: The KVM implementation in the Linux kernel through 4↗2019-03-17
▶
Kernel
Merge tag 'v5.0-rc6' into for-5.1/block↗2019-02-15
▶
Kernel
Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm↗2019-02-07
▶

📋Vendor Advisories

10
Ubuntu
Linux kernel (HWE) vulnerabilities↗2019-04-02
▶
Ubuntu
Linux kernel (HWE) vulnerabilities↗2019-04-02
▶
Ubuntu
Linux kernel vulnerabilities↗2019-04-02
▶
Ubuntu
Linux kernel vulnerabilities↗2019-04-02
▶
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities↗2019-04-02
▶

💬Community

2
Bugzilla
CVE-2019-7222 kernel: KVM: leak of uninitialized stack contents to guest [fedora-all]↗2019-02-07
▶
Bugzilla
CVE-2019-7222 Kernel: KVM: leak of uninitialized stack contents to guest↗2019-02-02
▶