← Back
UBUNTU-CVE-2019-7222
The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
AI summary snake-internal / snake-template-v1
A weakness called UBUNTU-CVE-2019-7222 was discovered in The KVM implementation in the.
Severity is Info. Low severity or not yet rated.
What you should do: update the affected software to the latest version. If unsure, ask your IT team or search the vendor's site for "The KVM implementation in the UBUNTU-CVE-2019-7222".
UBUNTU-CVE-2019-7222 (The KVM implementation in the). Severity: Info.
Response plan:
1. Check the vendor advisory for affected versions and the patched release.
2. If a vulnerable version is running in production, schedule maintenance (urgency from KEV/CVSS).
3. If no patch yet, mitigate via WAF rule, disabling the affected feature, etc.
4. Monitor logs / SIEM for known IOC and PoC signatures of this CVE.
PoCs and fix commits: see the 'References' section, MITRE, and NVD.
❓ What is the problem
A weakness (UBUNTU-CVE-2019-7222) in The KVM implementation in the. A serious software flaw has been identified.
📍 Affected scope
Target versions of The KVM implementation in the (see vendor advisory). If running in production, identify exposure immediately.
🔥 Severity
Severity: Info. Low severity or not yet rated.
🔧 How to fix
Update to the patched release as listed in the vendor advisory.
🛡️ Workaround
If a patch is not yet available, consider disabling the affected feature, applying WAF rules, blocking via network ACLs, or isolating the vulnerable version.
🔍 Detection
Check version information, scan dependencies via SBOM, and monitor SIEM for IOC and PoC signatures related to this CVE.
Affected packages
Ubuntu:14.04:LTS
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-168.218"}]}]
Ubuntu:14.04:LTS
linux-aws
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1040.43"}]}]
Ubuntu:14.04:LTS
linux-azure
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1041.45~14.04.1"}]}]
Ubuntu:14.04:LTS
linux-lts-xenial
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-144.170~14.04.1"}]}]
Ubuntu:16.04:LTS
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-145.171"}]}]
Ubuntu:16.04:LTS
linux-aws
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1079.89"}]}]
Ubuntu:16.04:LTS
linux-aws-hwe
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1035.37~16.04.1"}]}]
Ubuntu:16.04:LTS
linux-azure
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1041.45"}]}]
Ubuntu:16.04:LTS
linux-gcp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1029.31~16.04.1"}]}]
Ubuntu:16.04:LTS
linux-hwe
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-47.50~16.04.1"}]}]
Ubuntu:16.04:LTS
linux-kvm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1043.49"}]}]
Ubuntu:16.04:LTS
linux-oracle
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1010.12~16.04.1"}]}]
Ubuntu:16.04:LTS
linux-raspi2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1106.114"}]}]
Ubuntu:16.04:LTS
linux-snapdragon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1110.115"}]}]
Ubuntu:Pro:FIPS:16.04:LTS
linux-fips
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1008.10"}]}]
Ubuntu:18.04:LTS
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-47.50"}]}]
Ubuntu:18.04:LTS
linux-aws
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1035.37"}]}]
Ubuntu:18.04:LTS
linux-azure
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-1014.14~18.04.1"}]}]
Ubuntu:18.04:LTS
linux-gcp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1029.31"}]}]
Ubuntu:18.04:LTS
linux-gcp-edge
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-1008.9~18.04.1"}]}]
Ubuntu:18.04:LTS
linux-hwe
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-17.18~18.04.1"}]}]
Ubuntu:18.04:LTS
linux-kvm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1031.31"}]}]
Ubuntu:18.04:LTS
linux-oem
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1035.40"}]}]
Ubuntu:18.04:LTS
linux-oracle
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1010.12"}]}]
Ubuntu:18.04:LTS
linux-raspi2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1033.35"}]}]
Ubuntu:18.04:LTS
linux-snapdragon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.0-1053.57"}]}]
Ubuntu:20.04:LTS
linux-azure-fde
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:Pro:20.04:LTS
linux-azure-fde-5.15
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
linux-gke
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
linux-raspi2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
linux-riscv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
linux-intel-iot-realtime
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
linux-realtime
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
linux-riscv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
linux-azure-6.11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
linux-gcp-6.11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
linux-hwe-6.11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
linux-lowlatency-hwe-6.11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
linux-raspi-realtime
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
References
- advisory https://ubuntu.com/security/notices/USN-3930-1
- advisory https://ubuntu.com/security/notices/USN-3930-2
- advisory https://ubuntu.com/security/notices/USN-3931-1
- advisory https://ubuntu.com/security/notices/USN-3931-2
- advisory https://ubuntu.com/security/notices/USN-3932-1
- advisory https://ubuntu.com/security/notices/USN-3932-2
- advisory https://ubuntu.com/security/notices/USN-3933-1
- advisory https://ubuntu.com/security/notices/USN-3933-2
- report https://ubuntu.com/security/CVE-2019-7222
- report https://www.cve.org/CVERecord?id=CVE-2019-7222