Threat Investigation
Request a demo

CVE-2019-18844

High

Description

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information), which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions, whereas 2b3dedfb9ba1 is a mitigation for 1.1.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLinux Acrn
PublishedNov 13, 2019
First seenNov 13, 2019

How to fix

Update
  • linux acrn2019w25.5-140000p or later

Affected products

ProductAffected versionsFixed in
linux acrnv < 2019w25.5-140000p2019w25.5-140000p

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.