VULNERABILITY INTELLIGENCE

CVE-2019-3016

CVSS score6.2 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2020-01-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.

Weakness classification

  • secalert_us@oracle.com: CWE-200
  • nvd@nist.gov: CWE-362

Primary references