CVE-2019-6974

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.20.8

Description The issue is caused by a race condition in the kvm ioctl create device function, leading to a use-after-free error. This can be exploited by a remote attacker to cause a denial of service. The problem is related to errors in synchronization when using a shared resource.

Recommendations For Linux kernel versions prior to 4.20.8, update to version 4.20.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the kvm ioctl create device function to minimize the risk of exploitation.