CVE-2019-18844

Name of the Vulnerable Software and Affected Versions ACRN versions prior to 1.2 ACRN versions prior to 2019w25.5-140000p

Description The issue is related to the Device Model in ACRN, where assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci core.h are used instead of other mechanisms for propagating error information or diagnostic information. This might allow attackers to cause a denial of service (assertion failure) within the pci core.

Recommendations For ACRN versions prior to 1.1, apply the mitigation 6199e653418e. For ACRN version 1.1, apply the mitigation 2b3dedfb9ba1. For ACRN versions prior to 1.2, update to version 1.2 or later to resolve the issue.