{
  "cveId": "CVE-2019-19807",
  "url": "https://patchblox.com/security/cve/CVE-2019-19807",
  "summary": "CVE-2019-19807 is fixed in 37 products on 1 platform, first by RHSA-2020:3010, released July 21, 2020. It is not reported as exploited. Patch Radar priority: High.",
  "title": "kernel-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: u...",
  "description": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: use-after-free in sound/core/timer.c (CVE-2019-19807)\n\n* kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757)\n\n* kernel: Rogue cross-process SSBD shutdown. Linux scheduler logical bug allows an attacker to turn off the SSBD protection. (CVE-2020-10766)\n\n* kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available. (CVE-2020-10767)\n\n* kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command. (CVE-2020-10768)\n\n* kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c (CVE-2020-12653)\n\n* kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c (CVE-2020-12654)\n\n* Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888)\n\n* kernel: kvm: Information leak within a KVM guest (CVE-2019-3016)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [FJ8.2 Bug]: kernel: retrieving process core dump of the init process (PID 1) fails (BZ#1821378)\n\n* [FJ8.0 Bug]: System hungs up after setting parameters for hugepages (BZ#1835789)\n\n* RHEL8.2 Alpha - ISST-LTE:PowerVM: vNIC DLPAR crashes the LPAR (ibmvnic) (BZ#1836229)\n\n* \u0022[sig-network] Services should be rejected when no endpoints exist\u0022 test fails frequently on RHEL8 nodes (BZ#1836302)\n\n* RHEL8.2 Beta - RHEL8.2 reports EEH errors on internal SAS adapter during HTX run on PMEM (SCM/pmem) (BZ#1842406)\n\n* RHEL8.1 - s390/cio: fix virtio-ccw DMA without PV (BZ#1842620)\n\n* deadlock between modprobe and netns exit (BZ#1845164)\n\n* exit_boot failed when install RHEL8.1 (BZ#1846180)\n\n* http request is taking more time for endpoint running on different host via nodeport service (BZ#1847128)\n\n* RHEL8.1 - zEDC problems on z14 (genwqe/pci) (BZ#1847453)\n\n* WARNING: CPU: 1 PID: 0 at arch/x86/kernel/apic/vector.c:846 free_moved_vector\u002B0x141/0x150 (BZ#1848545)\n\n* Backport conntrack race condition fixes (BZ#1851003)\n\n* nf_conntrack module unload fail and refcount become to negative (BZ#1851005)\n\n* OVS: backport performance patches from upstream to 8.2z (BZ#1851235)\n\n* RHEL8.3: backport \u0022smp: Allow smp_call_function_single_async() to insert locked csd\u0022 (BZ#1851406)\n\n* [DELL EMC 8.2 BUG] NVMe drive is not detected after multiple hotplug (hot add \u002B surprise remove) operations (BZ#1852045)\n\nEnhancement(s):\n\n* [Mellanox 8.3 FEAT] mlx5: drivers update upto Linux v5.5 (BZ#1843544)\n\n* [IBM 8.3 FEAT] Update nvme driver to latest level for POWER (BZ#1846405)",
  "published": "2020-07-21T00:00:00Z",
  "severity": "Important",
  "cvss": 7.8,
  "epss": 0.00551,
  "epssPercentile": 0.46312,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-whitelists",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-whitelists",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-cross-headers",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-kvm",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-kvm",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.rt13.65.el8_2",
      "fix": "RHSA-2020:3016",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3016",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "RHSA-2020:3010",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-3010",
      "released": "2020-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-193.13.2.el8_2",
      "fix": "ELSA-2020-3010",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-3010",
      "released": "2020-07-24T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}