--- title: "CVE-2019-7221\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2019-7221?format=md keywords: index, follow --- # CVE-2019-7221 Publication date 21 March 2019 Last updated 4 July 2026 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) ## Cvss 3 Severity Score **7.8 · High** [Score breakdown](https://ubuntu.com/security/CVE-2019-7221?format=md#impact-score) Toggle side navigation ## Description The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. ### From the Ubuntu Security Team Jim Mattson and Felix Wilhelm discovered a use-after-free vulnerability in the KVM subsystem of the Linux kernel, when using nested virtual machines. A local attacker in a guest VM could use this to cause a denial of service (system crash) or possibly execute arbitrary code in the host system. [Read the notes from the security team](https://ubuntu.com/security/CVE-2019-7221?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux-aws-fips | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy FIPS Updates | Not affected | | 20.04 LTS focal FIPS | Not affected | | 18.04 LTS bionic FIPS | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-azure-fips | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy FIPS Updates | Not affected | | 20.04 LTS focal FIPS | Not affected | | 18.04 LTS bionic FIPS | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gcp-fips | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy FIPS Updates | Not affected | | 20.04 LTS focal FIPS | Not affected | | 18.04 LTS bionic FIPS | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Fixed 4.18.0-17.18 | | 18.04 LTS bionic | Fixed 4.15.0-47.50 | | 16.04 LTS xenial | Fixed 4.4.0-145.171 | | 14.04 LTS trusty | Not affected | | linux-aws | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Fixed 4.18.0-1012.14 | | 18.04 LTS bionic | Fixed 4.15.0-1035.37 | | 16.04 LTS xenial | Fixed 4.4.0-1079.89 | | 14.04 LTS trusty | Fixed 4.4.0-1040.43 | | linux-aws-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-aws-5.4 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-aws-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-aws-hwe | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Fixed 4.15.0-1035.37~16.04.1 | | 14.04 LTS trusty | Not in release | | linux-azure | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Fixed 4.18.0-1014.14 | | 18.04 LTS bionic | Fixed 4.18.0-1014.14~18.04.1 | | 16.04 LTS xenial | Fixed 4.15.0-1041.45 | | 14.04 LTS trusty | Fixed 4.15.0-1041.45~14.04.1 | | linux-azure-4.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-azure-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-azure-5.4 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-azure-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-azure-edge | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Fixed 4.18.0-1014.14~18.04.1 | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-azure-fde | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Ignored end of standard support, was ignored [superseded by linux-azure-fde-5.15] | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-azure-fde-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-bluefield | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-euclid | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Ignored end of standard support, was needed | | 14.04 LTS trusty | Not in release | | linux-fips | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy FIPS Updates | Not affected | | 20.04 LTS focal FIPS | Not affected | | 18.04 LTS bionic FIPS | Not affected | | 16.04 LTS xenial FIPS | Fixed 4.4.0-1017.22~recert1 | | 14.04 LTS trusty | Not in release | | linux-flo | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Ignored end of standard support | | 14.04 LTS trusty | Not in release | | linux-gcp | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Fixed 4.18.0-1008.9 | | 18.04 LTS bionic | Fixed 4.15.0-1029.31 | | 16.04 LTS xenial | Fixed 4.15.0-1029.31~16.04.1 | | 14.04 LTS trusty | Not in release | | linux-gcp-4.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gcp-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gcp-5.4 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gcp-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gcp-edge | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Fixed 4.18.0-1008.9~18.04.1 | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gke | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Ignored end of kernel support | | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Ignored end of standard support | | 14.04 LTS trusty | Not in release | | linux-gkeop | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-gkeop-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-goldfish | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Ignored end of standard support | | 14.04 LTS trusty | Not in release | | linux-grouper | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-hwe | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Fixed 4.18.0-17.18~18.04.1 | | 16.04 LTS xenial | Fixed 4.15.0-47.50~16.04.1 | | 14.04 LTS trusty | Not in release | | linux-hwe-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-hwe-5.4 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-hwe-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-hwe-edge | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Fixed 4.15.0-47.50~16.04.1 | | 14.04 LTS trusty | Not in release | | linux-ibm | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-ibm-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-ibm-5.4 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-intel | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-intel-iot-realtime | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy Real-time | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-intel-iotg | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-intel-iotg-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-iot | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-kvm | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Fixed 4.18.0-1009.9 | | 18.04 LTS bionic | Fixed 4.15.0-1031.31 | | 16.04 LTS xenial | Fixed 4.4.0-1043.49 | | 14.04 LTS trusty | Not in release | | linux-lowlatency | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lowlatency-hwe-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lowlatency-hwe-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-trusty | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-utopic | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-vivid | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-wily | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-lts-xenial | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Fixed 4.4.0-144.170~14.04.1 | | linux-maguro | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-mako | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Ignored end of standard support | | 14.04 LTS trusty | Not in release | | linux-manta | 19.10 eoan | Not in release | | 19.04 disco | Not in release | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-nvidia | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-nvidia-6.5 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-nvidia-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-nvidia-lowlatency | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-oem | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Fixed 4.15.0-1035.40 | | 18.04 LTS bionic | Fixed 4.15.0-1035.40 | | 16.04 LTS xenial | Ignored end of standard support, was needs-triage | | 14.04 LTS trusty | Not in release | | linux-oem-6.11 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-oem-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-oracle | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Fixed 4.15.0-1010.12 | | 18.04 LTS bionic | Fixed 4.15.0-1010.12 | | 16.04 LTS xenial | Fixed 4.15.0-1010.12~16.04.1 | | 14.04 LTS trusty | Not in release | | linux-oracle-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-oracle-5.4 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-oracle-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-raspi | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-raspi-5.4 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-raspi-realtime | 24.10 oracular | Not in release | | 24.04 LTS noble Real-time | Not affected | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-raspi2 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored end of standard support, was ignored [replaced by linux-raspi] | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Fixed 4.18.0-1011.13 | | 18.04 LTS bionic | Fixed 4.15.0-1033.35 | | 16.04 LTS xenial | Fixed 4.4.0-1106.114 | | 14.04 LTS trusty | Not in release | | linux-realtime | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy Real-time | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-riscv | 24.10 oracular | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Ignored end of kernel support | | 20.04 LTS focal | Ignored end of standard support, was ignored [superseded by linux-riscv-5.8] | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-riscv-5.15 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-riscv-6.8 | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | | linux-snapdragon | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Not in release | | 19.10 eoan | Not affected | | 19.04 disco | Not affected | | 18.10 cosmic | Not in release | | 18.04 LTS bionic | Fixed 4.15.0-1053.57 | | 16.04 LTS xenial | Fixed 4.4.0-1110.115 | | 14.04 LTS trusty | Not in release | | linux-xilinx-zynqmp | 24.10 oracular | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2019-7221?format=md#patch-details) ## Notes --- ### [tyhicks](https://launchpad.net/~tyhicks) Ubuntu kernels do not enable nested KVM virtualization by default and are unaffected by this flaw in the default configuration. However, installing QEMU results in nested KVM support to be enabled via the /etc/modprobe.d/qemu-system-x86.conf file. To ensure that nested virtualization is not enabled, verify that the /sys/module/kvm\_intel/parameters/nested file contains "N". ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | linux | * Introduced by [f412450](https://git.kernel.org/linus/f4124500c2c13eb1208c6143b3f6d469709dea10), fixed by [ecec768](https://git.kernel.org/linus/ecec76885bcfe3294685dc363fd1273df0d5d65f) | ## Severity score breakdown CVSS version: CVSS v3.0 **Base score** 7.8 · High * Base metrics | Parameter | Value | | --- | --- | | Attack vector | Local | | Attack complexity | Low | | Privileges required | Low | | User interaction | None | | Scope | Unchanged | | Confidentiality impact | High | | Integrity impact | High | | Availability impact | High | * Scores | Parameter | Value | | --- | --- | | Base score | 7.8 · High | | Exploitability score | - | | Impact score | - | **Vector:** CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7221) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2019-7221) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2019-7221) * [Debian](https://security-tracker.debian.org/tracker/CVE-2019-7221) ### Related Ubuntu Security Notices (USN) + [USN-3932-1](https://usn.ubuntu.com/USN-3932-1) + Linux kernel vulnerabilities + 2 April 2019 + [USN-3932-2](https://usn.ubuntu.com/USN-3932-2) + Linux kernel (Xenial HWE) vulnerabilities + 2 April 2019 + [USN-3930-2](https://usn.ubuntu.com/USN-3930-2) + Linux kernel (HWE) vulnerabilities + 2 April 2019 + [USN-3930-1](https://usn.ubuntu.com/USN-3930-1) + Linux kernel vulnerabilities + 2 April 2019 + [USN-3931-2](https://usn.ubuntu.com/USN-3931-2) + Linux kernel (HWE) vulnerabilities + 2 April 2019 + [USN-3931-1](https://usn.ubuntu.com/USN-3931-1) + Linux kernel vulnerabilities + 2 April 2019 ### Other references *