Total vulnerabilities in the database
A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 3.10 | 3.10.x |
| linux / linux_kernel | 4.14 | 4.14.x |
| linux / linux_kernel | 4.18 | 4.18.x |
| fedoraproject / fedora | - | - |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| debian / debian_linux | 10.0 | 10.0.x |
| canonical / ubuntu_linux | 16.04 | 16.04.x |
| canonical / ubuntu_linux | 18.04 | 18.04.x |
| canonical / ubuntu_linux | 18.10 | 18.10.x |
| canonical / ubuntu_linux | 19.04 | 19.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| opensuse / leap | 42.3 | 42.3.x |
| opensuse / leap | 15.0 | 15.0.x |
| opensuse / leap | 15.1 | 15.1.x |
| netapp / vasa_provider_for_clustered_data_ontap | 7.2 | 7.2.x |
| netapp / active_iq_unified_manager_for_vmware_vsphere | 9.5 | 9.5.x |
| netapp / virtual_storage_console_for_vmware_vsphere | 7.2 | 7.2.x |
| netapp / storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere | 7.2 | 7.2.x |