Skip to content
OpenAdvisories

Description

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.

Affected products

VendorProductAffectedFixed
— 2019.2 IPU – Intel(R) Processor Machine Check Error See provided reference —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.3.9-2 —
Debian 14 xen 4.11.3+24-g14b62ab3e5-1 —
Debian 13 linux 5.3.9-2 —
Debian 13 xen 4.11.3+24-g14b62ab3e5-1 —
Debian 12 linux 5.3.9-2 —
Debian 12 xen 4.11.3+24-g14b62ab3e5-1 —
Debian 10 linux 4.19.67-2+deb10u2 DSA-4564-1
Debian 10 xen 4.11.3+24-g14b62ab3e5-1~deb10u1 DSA-4602-1
Debian 9 linux 4.9.189-3+deb9u2 DSA-4564-1
Debian 9 xen 4.8.5.final+shim4.10.4-1+deb9u12 DSA-4602-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 8 linux-4.9 4.9.189-3+deb9u2~deb8u1 DLA-1990-1
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS linux-vmware No fix yet —
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-realtime +1 No fix yet —
Ubuntu 20.04 LTS linux-raspi2 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-69.78 USN-4185-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1054.56 USN-4185-1
Ubuntu 18.04 LTS linux-azure 5.0.0-1025.27~18.04.1 USN-4184-1
Ubuntu 18.04 LTS linux-gcp +1 5.0.0-1025.26~18.04.1 USN-4184-1
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1048.51 USN-4185-1
Ubuntu 18.04 LTS linux-hwe 5.0.0-35.38~18.04.1 USN-4184-1
Ubuntu 18.04 LTS linux-kvm 4.15.0-1050.50 USN-4185-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1063.72 USN-4185-1
Ubuntu 18.04 LTS linux-oem-osp1 5.0.0-1027.31 USN-4184-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1029.32 USN-4185-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1052.56 —
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1069.76 —
Ubuntu 18.04 LTS xen +3 No fix yet —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux 4.4.0-168.197 USN-4186-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1098.109 USN-4186-1
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1054.56~16.04.1 USN-4185-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1063.68 USN-4185-1
Ubuntu 16.04 LTS linux-gcp 4.15.0-1049.52 USN-4185-1
Ubuntu 16.04 LTS linux-hwe 4.15.0-69.78~16.04.1 USN-4185-1
Ubuntu 16.04 LTS linux-kvm 4.4.0-1062.69 USN-4186-1
Ubuntu 16.04 LTS linux-oracle 4.15.0-1029.32~16.04.1 USN-4185-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1126.135 —
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1130.138 —
Ubuntu 16.04 LTS xen +1 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2018.18 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1025.30 —
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1058.62 USN-4186-2
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1063.68~14.04.1 USN-4185-2
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-168.197~14.04.1 USN-4186-2
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-147.0.2.rt24.94.el8_1 RHSA-2019:3833
RHEL 8 kpatch-patch-4_18_0-147 1-3.el8_1 RHSA-2019:3936
RHEL 8 perf +26 4.18.0-147.0.2.el8_1 RHSA-2019:3832
RHEL 7 kernel +15 3.10.0-1062.4.2.el7 RHSA-2019:3834
RHEL 7 kernel-rt +10 3.10.0-1062.4.2.rt56.1028.el7 RHSA-2019:3835
RHEL 7 kpatch-patch-3_10_0-1062 1-9.el7 RHSA-2020:0028
RHEL 7 kpatch-patch-3_10_0-1062_1_1 1-8.el7 RHSA-2020:0028
RHEL 7 kpatch-patch-3_10_0-1062_1_2 1-7.el7 RHSA-2020:0028
RHEL 7 kpatch-patch-3_10_0-1062_4_1 1-4.el7 RHSA-2020:0028
RHEL 7 perf +2 3.10.0-957.38.2.el7 RHSA-2019:3837, RHSA-2019:3834
RHEL 7 redhat-virtualization-host +1 4.3.6-20191108.0.el7_7 RHSA-2019:3860
RHEL 6 perf +15 2.6.32-754.24.2.el6 RHSA-2019:3836
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.0 E4S perf +18 4.18.0-80.15.1.el8_0 RHSA-2020:0204
RHEL 7.6 EUS kpatch-patch-3_10_0-957_35_1 1-5.el7 RHSA-2020:0026
RHEL 7.6 EUS kpatch-patch-3_10_0-957_35_2 1-4.el7 RHSA-2020:0026
RHEL 7.6 EUS kpatch-patch-3_10_0-957_38_1 1-3.el7 RHSA-2020:0026
RHEL 7.6 EUS perf +18 3.10.0-957.38.2.el7 RHSA-2019:3837
RHEL 7.5 EUS perf +17 3.10.0-862.43.2.el7 RHSA-2019:3838
RHEL 7.4 TUS perf +11 3.10.0-693.60.2.el7 RHSA-2019:3839
RHEL 7.4 E4S perf +13 3.10.0-693.60.2.el7 RHSA-2019:3839
RHEL 7.4 AUS perf +11 3.10.0-693.60.2.el7 RHSA-2019:3839
RHEL 7.3 TUS perf +11 3.10.0-514.70.2.el7 RHSA-2019:3840
RHEL 7.3 E4S perf +13 3.10.0-514.70.2.el7 RHSA-2019:3840
RHEL 7.3 AUS perf +11 3.10.0-514.70.2.el7 RHSA-2019:3840
RHEL 7.2 TUS perf +11 3.10.0-327.82.2.el7 RHSA-2019:3841
RHEL 7.2 E4S perf +11 3.10.0-327.82.2.el7 RHSA-2019:3841
RHEL 7.2 AUS perf +11 3.10.0-327.82.2.el7 RHSA-2019:3841
RHEL 6.6 AUS perf +9 2.6.32-504.81.3.el6 RHSA-2019:3842
RHEL 6.5 AUS perf +9 2.6.32-431.96.3.el6 RHSA-2019:3843
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.60.2.rt56.655.el6rt RHSA-2019:3844
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-azure +2 4.12.14-8.19.1 SUSE-SU-2019:2952-1
SLES 15 SP1 kernel-docs +5 4.12.14-197.26.1 SUSE-SU-2019:2947-1
SLES 15 SP1 qemu 3.1.1.1-9.6.2 SUSE-SU-2019:2955-1
SLES 15 SP1 spectre-meltdown-checker 0.43-3.3.1 SUSE-SU-2019:3348-1
SLES 15 SP1 xen 4.12.1_04-3.6.1 SUSE-SU-2019:2961-1
SLES 15 kernel-azure +2 4.12.14-5.44.1 SUSE-SU-2019:2951-1
SLES 15 kernel-docs +6 4.12.14-150.41.1 SUSE-SU-2019:2946-1
SLES 15 qemu 2.11.2-9.33.1 SUSE-SU-2019:2954-1
SLES 15 xen 4.10.4_06-3.25.1 SUSE-SU-2019:2960-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.7.1 SUSE-SU-2020:0093-1
SLES 12 SP5 spectre-meltdown-checker 0.43-3.3.1 SUSE-SU-2019:3340-1
SLES 12 SP4 kernel-azure +2 4.12.14-6.29.1 SUSE-SU-2019:2953-1
SLES 12 SP4 kernel-docs +3 4.12.14-95.40.1 SUSE-SU-2019:2948-1
SLES 12 SP4 kernel-obs-build 4.12.14-95.40.2 SUSE-SU-2019:2948-1
SLES 12 SP4 qemu 2.11.2-5.23.2 SUSE-SU-2019:2956-1
SLES 12 SP4 xen 4.11.2_04-2.17.1 SUSE-SU-2019:2962-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SLES 12 SP3 xen 4.9.4_06-3.59.1 SUSE-SU-2019:3297-1
Show 19 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 kernel-syms +2 4.4.121-92.125.1 SUSE-SU-2019:2984-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_33 1-3.5.1 SUSE-SU-2019:2984-1
SLES 12 SP2 xen 4.7.6_06-43.59.1 SUSE-SU-2020:0334-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.124.1 SUSE-SU-2019:2950-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_37 1-2.3.1 SUSE-SU-2019:2950-1
SLES 12 SP1 xen 4.5.5_28-22.64.1 SUSE-SU-2020:0388-1
SLES 12 kernel-ec2 3.12.74-60.64.124.1 SUSE-SU-2019:2950-1
SLES 11 SP4 kernel-ec2 +8 3.0.101-108.108.1 SUSE-SU-2019:14218-1
SLES 11 SP4 ocfs2 1.6-0.28.11.2 SUSE-SU-2019:14218-1
SLES 11 SP4 xen 4.4.4_42-61.52.1 SUSE-SU-2020:14444-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.7.1 SUSE-SU-2020:0093-1
SLES for SAP 12 SP5 spectre-meltdown-checker 0.43-3.3.1 SUSE-SU-2019:3340-1
SLES for SAP 12 SP4 kernel-azure +2 4.12.14-6.29.1 SUSE-SU-2019:2953-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.40.1 SUSE-SU-2019:2948-1
SLES for SAP 12 SP4 qemu 2.11.2-5.23.2 SUSE-SU-2019:2956-1
SLES for SAP 12 SP4 xen 4.11.2_04-2.17.1 SUSE-SU-2019:2962-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SLES for SAP 12 SP3 xen 4.9.4_06-3.59.1 SUSE-SU-2019:3297-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.125.1 SUSE-SU-2019:2984-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_33 1-3.5.1 SUSE-SU-2019:2984-1
SLES for SAP 12 SP2 xen 4.7.6_06-43.59.1 SUSE-SU-2020:0334-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.124.1 SUSE-SU-2019:2950-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_37 1-2.3.1 SUSE-SU-2019:2950-1
SLES for SAP 12 SP1 xen 4.5.5_28-22.64.1 SUSE-SU-2020:0388-1
SLE Real Time 12 SP4 kernel-rt +3 4.12.14-8.9.3 SUSE-SU-2019:3294-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.26.1 SUSE-SU-2019:2947-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_7 1-3.5.1 SUSE-SU-2019:2947-1
SLE Live Patching 15 kernel-default 4.12.14-150.41.1 SUSE-SU-2019:2946-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_16 1-1.3.1 SUSE-SU-2019:2946-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.40.1 SUSE-SU-2019:2948-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_10 1-6.3.1 SUSE-SU-2019:2948-1
SUSE Real Time Module 15 SP1 kernel-rt +1 4.12.14-14.14.3 SUSE-SU-2019:3295-1
SUSE Real Time Module 15 SP1 kernel-syms-rt +1 4.12.14-14.14.2 SUSE-SU-2019:3295-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SUSE OpenStack Cloud Crowbar 8 xen 4.9.4_06-3.59.1 SUSE-SU-2019:3297-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SUSE OpenStack Cloud 8 xen 4.9.4_06-3.59.1 SUSE-SU-2019:3297-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.125.1 SUSE-SU-2019:2984-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_33 1-3.5.1 SUSE-SU-2019:2984-1
SUSE OpenStack Cloud 7 xen 4.7.6_06-43.59.1 SUSE-SU-2020:0334-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SUSE HPE Helion OpenStack 8 xen 4.9.4_06-3.59.1 SUSE-SU-2019:3297-1
SUSE Enterprise Storage 5 kernel-syms +2 4.4.180-94.107.1 SUSE-SU-2019:2949-1
SUSE Enterprise Storage 5 kgraft-patch-SLE12-SP3_Update_29 1-4.3.1 SUSE-SU-2019:2949-1
SUSE Enterprise Storage 5 xen 4.9.4_06-3.59.1 SUSE-SU-2019:3297-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed qemu 6.1.0-32.1 openSUSE-SU-2024:11287-1
openSUSE Tumbleweed spectre-meltdown-checker 0.44-1.2 openSUSE-SU-2024:11396-1
openSUSE Leap 15.1 kernel-docs +8 4.12.14-lp151.28.32.1 openSUSE-SU-2019:2507-1
openSUSE Leap 15.1 qemu +1 3.1.1.1-lp151.7.6.1 openSUSE-SU-2019:2510-1
openSUSE Leap 15.1 spectre-meltdown-checker 0.43-lp151.3.3.1 openSUSE-SU-2019:2710-1
openSUSE Leap 15.0 kernel-docs +8 4.12.14-lp150.12.82.1 openSUSE-SU-2019:2503-1
openSUSE Leap 15.0 qemu 2.11.2-lp150.7.28.1 openSUSE-SU-2019:2505-1
openSUSE Leap 15.0 xen 4.10.4_06-lp150.2.25.1 openSUSE-SU-2019:2506-1
ReleasePackageFixed inAdvisory
Alpine v3.24 xen 4.13.0-r0 —
Alpine v3.23 xen 4.13.0-r0 —
Alpine v3.22 xen 4.13.0-r0 —
Alpine v3.21 xen 4.13.0-r0 —
Alpine v3.20 xen 4.13.0-r0 —
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 xen 4.13.0-r0 —
Alpine v3.18 xen 4.13.0-r0 —
Alpine v3.17 xen 4.13.0-r0 —
Alpine v3.16 xen 4.13.0-r0 —
Alpine v3.15 xen 4.13.0-r0 —
Alpine v3.14 xen 4.13.0-r0 —
Alpine v3.13 xen 4.13.0-r0 —
Alpine v3.12 xen 4.13.0-r0 —
Alpine v3.11 xen 4.13.0-r0 —
Alpine v3.10 xen 4.12.1-r1 —
Alpine v3.9 xen 4.11.2-r1 —
Alpine v3.8 xen 4.10.4-r1 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 perf +8 4.14.154-128.181.amzn2 ALAS2-2019-1366

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-147.0.2.el8_1 ELSA-2019-3832
Oracle Linux 7 kernel-uek +5 4.1.12-124.32.3.2.el7uek ELSA-2019-4850, ELSA-2019-4837, ELSA-2019-4836
Oracle Linux 7 kernel-uek-tools +3 4.14.35-1902.7.3.el7uek ELSA-2019-4836
Oracle Linux 7 microcode_ctl 2:2.1-53.3.0.4.el7_7 ELSA-2019-4867
Oracle Linux 7 perf +12 3.10.0-1062.4.2.el7 ELSA-2019-4836, ELSA-2019-3834

Advisories 50

References