Name | CVE-2019-7221 |
Description | The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
References | DLA-1731-1, DLA-1771-1 |
Vulnerable and fixed packages
The table below lists information on source packages.
Source Package | Release | Version | Status |
---|
linux (PTS) | bullseye (security), bullseye | 5.10.223-1 | fixed |
| bookworm | 6.1.106-3 | fixed |
| bookworm (security) | 6.1.99-1 | fixed |
| sid, trixie | 6.10.9-1 | fixed |
The information below is based on the following data on fixed versions.
Notes
https://git.kernel.org/linus/ecec76885bcfe3294685dc363fd1273df0d5d65f
https://bugs.chromium.org/p/project-zero/issues/detail?id=1760