{
  "cveId": "CVE-2019-3887",
  "url": "https://patchblox.com/security/cve/CVE-2019-3887",
  "summary": "CVE-2019-3887 is fixed in 37 products on 1 platform, first by RHSA-2019:2703, released September 12, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: H...",
  "description": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c (CVE-2019-3846)\n\n* Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS (CVE-2019-3887)\n\n* kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results (CVE-2019-9500)\n\n* kernel: Count overflow in FUSE request leading to use-after-free issues. (CVE-2019-11487)\n\n* kernel: ppc: unrelated processes being able to read/write to each other\u0027s virtual memory (CVE-2019-12817)\n\n* kernel: Use-after-free in sound/usb/card.c:usb_audio_probe() (CVE-2018-19824)\n\n* kernel: brcmfmac frame validation bypass (CVE-2019-9503)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [DELL EMC 8.0 BUG]: pciehp deadlock resulting in NVMe device not being recognized when hot plugged (BZ#1712261)\n\n* Host crashed while try to boot a compatible guest attached huge page by\u0022-object memory-backend-file *\u0022[1G-P9] (BZ#1714758)\n\n* Setting malformed authenc key will crash the system  (BZ#1715335)\n\n* BUG: memory allocation failure in inode_doinit_with_dentry()/context_to_sid() (BZ#1717780)\n\n* [HPEMC 8.1 BUG] Protect against concurrent calls into UV BIOS (BZ#1724534)\n\n* PHC jumping on I350 (igb) (BZ#1726352)\n\n* aarch64 kernel missing vulnerabilities status files (BZ#1726353)\n\n* BUG: KASAN: use-after-free in skb_release_data() (BZ#1726354)\n\n* [RHEL8][PANIC][aarch64] kernel panic when loading the dme1737 module (BZ#1726355)\n\n* [RHEL8] [aarch64] Changes for BZ1672997 break kaslr (BZ#1726357)\n\n* Network fails to come up when booting with kernel 3.10.0-862.el7.x86_64, several hung tasks can be seen in logs. (BZ#1726358)\n\n* [Intel] \u0027cpupower frequency-set\u0027 produces unexpected results for some processors (BZ#1726360)\n\n* HDMI/DP audio: ELD not updated on hotplug event (BZ#1726361)\n\n* [mlx5_core] CX5 Adapter works not as expected when MTU is 9000, Unable to handle kernel paging request at virtual address 3ae0aafeff4b6b5a (BZ#1726372)\n\n* [DELL 8.0 Bug] - hid-multitouch 0018:1FD2:8008.0001 ,lost function from S3 resume  (BZ#1727098)\n\n* [RHEL8.1 Pre Beta] [Power8] data corruption while returning from watchpoint exception handler (BZ#1733281)\n\n* RHEL8.1 pre-Beta - cacheinfo code unsafe vs LPM (BZ#1733282)\n\n* RHEL8.1 pre-Beta - [ZZ/Zeppelin] [kernel-4.18.0-100.el8.ppc64le] Hash MMU allows child to write parents process address space (BZ#1734689)",
  "published": "2019-09-12T00:00:00Z",
  "severity": "Important",
  "cvss": 6.7,
  "epss": 0.00358,
  "epssPercentile": 0.29744,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-whitelists",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-whitelists",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-cross-headers",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-cross-headers",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-kvm",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-debug-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-kvm",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.rt9.156.el8_0",
      "fix": "RHSA-2019:2741",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2741",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "RHSA-2019:2703",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "ol 8",
      "fixedVersion": "0:4.18.0-80.11.1.el8_0",
      "fix": "ELSA-2019-2703",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2703",
      "released": "2019-09-12T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}