CVE-2019-14835: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.

Affected products

  • Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 18.04 only; version 19.04 only
  • Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
  • Fedoraproject Fedora: version 29 only; version 30 only
  • Huawei Imanager Neteco: version v600r009c00 only; version v600r009c10spc200 only
  • Huawei Imanager Neteco 6000: version v600r008c10spc300 only; version v600r008c20 only
  • Huawei Manageone: version 6.5.0 only; version 6.5.0.spc100.b210 only; version 6.5.1rc1.b060 only; version 6.5.1rc1.b080 only; version 6.5.rc2.b050 only
  • Linux Linux Kernel: from 2.6.34, before 3.16.74 (fixed in 3.16.74); from 4.4, before 4.4.193 (fixed in 4.4.193); from 4.9, before 4.9.193 (fixed in 4.9.193); from 4.14, before 4.14.144 (fixed in 4.14.144); from 4.19, before 4.19.73 (fixed in 4.19.73); from 5.2, before 5.2.15 (fixed in 5.2.15); …
  • Netapp Aff a700s Firmware: affected versions not specified
  • Netapp Data Availability Services: affected versions not specified
  • Netapp h300e Firmware: affected versions not specified
  • Netapp h300s Firmware: affected versions not specified
  • Netapp h410c Firmware: affected versions not specified
  • Netapp h410s Firmware: affected versions not specified
  • Netapp h500e Firmware: affected versions not specified
  • Netapp h500s Firmware: affected versions not specified
  • Netapp h610s Firmware: affected versions not specified
  • Netapp h700e Firmware: affected versions not specified
  • Netapp h700s Firmware: affected versions not specified
  • Netapp Hci Management Node: affected versions not specified
  • Netapp Service Processor: affected versions not specified
  • Netapp Solidfire: affected versions not specified
  • Netapp Steelstore Cloud Integrated Storage: affected versions not specified
  • Opensuse Leap: version 15.0 only; version 15.1 only
  • Red Hat Enterprise Linux: version 8.0 only
  • Red Hat Enterprise Linux Desktop: version 6.0 only; version 7.0 only
  • and 9 more

Published 2019-09-17. Last modified 2026-06-17.