CVE-2019-6974
- Source
- https://cve.org/CVERecord?id=CVE-2019-6974
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6974.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-6974
- Downstream
BELL (1)
DEBIAN (1)
SUSE (17)
- SUSE-SU-2019:0541-1
- SUSE-SU-2019:0672-1
- SUSE-SU-2019:0683-1
- SUSE-SU-2019:0709-1
- SUSE-SU-2019:0722-1
- SUSE-SU-2019:0726-1
- SUSE-SU-2019:0740-1
- SUSE-SU-2019:0745-1
- SUSE-SU-2019:0754-1
- SUSE-SU-2019:0765-1
- SUSE-SU-2019:0767-1
- SUSE-SU-2019:0784-1
- SUSE-SU-2019:0785-1
- SUSE-SU-2019:0828-1
- SUSE-SU-2019:0845-1
- SUSE-SU-2019:0901-1
- SUSE-SU-2019:1289-1
- Related
- Published
- 2019-02-15T15:29:00Z
- Modified
- 2026-04-16T04:31:29Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
- References
-
- https://support.f5.com/csp/article/K11186236?utm_source=f5support&%3Butm_medium=RSS
- https://usn.ubuntu.com/3930-2/
- https://usn.ubuntu.com/3931-1/
- https://access.redhat.com/errata/RHBA-2019:0959
- https://access.redhat.com/errata/RHSA-2019:3967
- https://access.redhat.com/errata/RHSA-2020:0103
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.99
- https://usn.ubuntu.com/3931-2/
- https://usn.ubuntu.com/3932-1/
- https://usn.ubuntu.com/3933-2/
- https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html
- https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
- https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
- https://support.f5.com/csp/article/K11186236
- https://access.redhat.com/errata/RHSA-2019:0818
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.156
- https://usn.ubuntu.com/3930-1/
- https://usn.ubuntu.com/3932-2/
- https://usn.ubuntu.com/3933-1/
- http://www.securityfocus.com/bid/107127
- https://access.redhat.com/errata/RHSA-2019:0833
- https://access.redhat.com/errata/RHSA-2019:2809
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.21
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.8
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cfa39381173d5f969daf43582c95ad679189cbc9
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1765
- https://github.com/torvalds/linux/commit/cfa39381173d5f969daf43582c95ad679189cbc9
- https://www.exploit-db.com/exploits/46388/
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Affected ranges
- Type
- GIT
- Repo
- http://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast Affected6e4664525b1db28f8c4e1130957f70a94c19213e
- Database specific
-
Show details
{ "versions": [ { "introduced": "0" }, { "last_affected": "3.11" } ] }
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedcfa39381173d5f969daf43582c95ad679189cbc9
- Type
- GIT
- Repo
- https://github.com/torvalds/linux
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6974.json"
unresolved_ranges
[
{
"events": [
{
"introduced": "3.10"
},
{
"fixed": "3.16.64"
}
]
},
{
"events": [
{
"introduced": "3.17"
},
{
"fixed": "3.18.136"
}
]
},
{
"events": [
{
"introduced": "3.19"
},
{
"fixed": "4.4.176"
}
]
},
{
"events": [
{
"introduced": "4.5"
},
{
"fixed": "4.9.156"
}
]
},
{
"events": [
{
"introduced": "4.10"
},
{
"fixed": "4.14.99"
}
]
},
{
"events": [
{
"introduced": "4.15"
},
{
"fixed": "4.19.21"
}
]
},
{
"events": [
{
"introduced": "4.20"
},
{
"fixed": "4.20.8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "18.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "18.10"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "13.0.0"
},
{
"last_affected": "13.1.1"
}
]
},
{
"events": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.1.0"
}
]
},
{
"events": [
{
"introduced": "15.0.0"
},
{
"fixed": "15.1.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
}
]