Skip to content

CVEs Search About

synced 14 MIN AGOT-14M

01 Record indexIDX: —

02 Records

FEED: ACQUIRING

About Terms Privacy Cookies

CVE™ Copyright © 1999-2026 and CWE™ Copyright © 2006-2026, The MITRE Corporation. Licence text and source attribution on our Terms of Use. This product uses the NVD API but is not endorsed or certified by the NVD. CVSS is owned by FIRST.Org, Inc. and used by permission.

SRC: CVELISTV5 / SYNC: T-14M / LAG: 16M / REC: 386,250 / REV: C6-1C / V4

01 RecordSTATE: PUBLISHED

CVE-2019-7222

The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

02 Description

CNA: mitre

The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

03 Exploitation and scoring

SRC: CISA, FIRST, NVD, RED HAT

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.68% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 49.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

SCHEMA: 5.1

Published

2019-03-17 18:52Z7 YR AGO

Last updated

2024-08-04 20:46Z2 YR AGO

Reserved

2019-01-30

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-200Exposure of Sensitive Information to an Unauthorized ActorClass

Data version

5.1

Document digest

612923b741c94f257de97eda27be8b4d79e649ebfab866c3602fb810d6cb26a9

05 Affected products

PAIRS: 20

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

debiandebian_linuxNot specified—

fedoraprojectfedoraNot specified—

linuxlinux_kernelNot specified—

netappactive_iq_performance_analytics_servicesNot specified—

netappelement_software_management_nodeNot specified—

opensuseleapNot specified—

redhatenterprise_linuxNot specified—

redhatenterprise_linux_desktopNot specified—

redhatenterprise_linux_eusNot specified—

redhatenterprise_linux_for_real_timeNot specified—

redhatenterprise_linux_for_real_time_for_nfvNot specified—

redhatenterprise_linux_for_real_time_for_nfv_tusNot specified—

redhatenterprise_linux_for_real_time_tusNot specified—

redhatenterprise_linux_serverNot specified—

redhatenterprise_linux_server_ausNot specified—

redhatenterprise_linux_server_tusNot specified—

redhatenterprise_linux_workstationNot specified—

redhatenterprise_mrgNot specified—

redhatrhel_extras_rtNot specified—

06 References

REFS: 25

lists.fedoraproject.orgFEDORA-2019-164946aa7fhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDOXCX3QFVWYXH5CQMGDDE7H6MUG5XGG/vendor-advisoryx_refsource_FEDORA
packetstormsecurity.comhttp://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.htmlx_refsource_MISC
www.securityfocus.com106963http://www.securityfocus.com/bid/106963vdb-entryx_refsource_BID
lists.fedoraproject.orgFEDORA-2019-3da64f3e61https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y2HMABEMJDPA6LPCBE5WIEZXUKY7DLTN/vendor-advisoryx_refsource_FEDORA
github.comhttps://github.com/torvalds/linux/commits/master/arch/x86/kvmx_refsource_MISC
lists.opensuse.orgSUSE-SA-2019:0203-1http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.htmlvendor-advisoryx_refsource_SUSE
git.kernel.orghttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=353c0956a618a07ba4bbe7ad00ff29fe70e8412ax_refsource_CONFIRM
www.openwall.com[oss-security] Linux kernel: three KVM bugs (CVE-2019-6974, CVE-2019-7221, CVE-2019-7222)http://www.openwall.com/lists/oss-security/2019/02/18/2mailing-listx_refsource_MLIST
bugs.chromium.orghttps://bugs.chromium.org/p/project-zero/issues/detail?id=1759x_refsource_CONFIRM
lists.debian.org[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security updatehttps://lists.debian.org/debian-lts-announce/2019/03/msg00034.htmlmailing-listx_refsource_MLIST
lists.debian.org[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression updatehttps://lists.debian.org/debian-lts-announce/2019/04/msg00004.htmlmailing-listx_refsource_MLIST
usn.ubuntu.comUSN-3932-1https://usn.ubuntu.com/3932-1/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-3932-2https://usn.ubuntu.com/3932-2/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-3930-1https://usn.ubuntu.com/3930-1/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-3931-1https://usn.ubuntu.com/3931-1/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-3933-2https://usn.ubuntu.com/3933-2/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-3931-2https://usn.ubuntu.com/3931-2/vendor-advisoryx_refsource_UBUNTU
usn.ubuntu.comUSN-3930-2https://usn.ubuntu.com/3930-2/vendor-advisoryx_refsource_UBUNTU
security.netapp.comhttps://security.netapp.com/advisory/ntap-20190404-0002/x_refsource_CONFIRM
usn.ubuntu.comUSN-3933-1https://usn.ubuntu.com/3933-1/vendor-advisoryx_refsource_UBUNTU
lists.debian.org[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security updatehttps://lists.debian.org/debian-lts-announce/2019/05/msg00002.htmlmailing-listx_refsource_MLIST
access.redhat.comRHSA-2019:2043https://access.redhat.com/errata/RHSA-2019:2043vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2019:2029https://access.redhat.com/errata/RHSA-2019:2029vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2019:3309https://access.redhat.com/errata/RHSA-2019:3309vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2019:3517https://access.redhat.com/errata/RHSA-2019:3517vendor-advisoryx_refsource_REDHAT