AZL-34854
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-34854.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-34854
- Upstream
- Published
- 2019-04-09T16:29:01Z
- Modified
- 2026-04-01T05:12:42.316216Z
- Severity
-
- 5.6 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2019-3887 affecting package kernel for versions less than 6.6.35.1-4
- Details
-
A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.
- References