PublicDateAtUSN: 2020-01-30 18:00:00 UTC
Candidate: CVE-2019-3016
CRD: 2020-01-30 18:00:00 UTC
PublicDate: 2020-01-31 20:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3016
 https://ubuntu.com/security/notices/USN-4300-1
 https://ubuntu.com/security/notices/USN-4301-1
 https://usn.ubuntu.com/lsn/0065-1/
Description:
 In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel
 may be able to read memory locations from another process in the same
 guest. This problem is limit to the host running linux kernel 4.10 with a
 guest running linux kernel 4.16 or later. The problem mainly affects AMD
 processors but Intel CPUs cannot be ruled out.
Ubuntu-Description:
 It was discovered that the KVM implementation in the Linux kernel, when
 paravirtual TLB flushes are enabled in guests, the hypervisor in some
 situations could miss deferred TLB flushes or otherwise mishandle them. An
 attacker in a guest VM could use this to expose sensitive information (read
 memory from another guest VM).
Notes:
 tyhicks> This issue does not affect default installations of Ubuntu as the
  paravirtual TLB flush feature in KVM is not enabled by default. The QEMU CPU
  feature "kvm-pv-tlb-flush" is used to enable paravirtual TLB flush.
 cascardo> It is thought that issue does not affect Intel processors
  *not* supporting Process-Context Identifiers (PCIDs). You can check
  support for PCIDs on systems with Intel processors by running "grep pcid
  /proc/cpuinfo" and verifying that "pcid" shows as one of the flags.
 cascardo> it was mentioned that it was only easily reproducible on AMD
  CPUs.
Mitigation: 
Bugs: 
Priority: medium
Discovered-by:
Assigned-to: cascardo
CVSS:
 nvd: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N [4.7 MEDIUM]

Patches_linux:
 break-fix: f38a7b75267f1fb240a8178cbcb16d66dd37aac8 8c6de56a42e0c657955e12b882a81ef07d1d073e|local-2019-3016-fix
upstream_linux: released (5.6~rc1)
precise/esm_linux: not-affected (3.0.0-12.20)
trusty_linux: ignored (out of standard support)
trusty/esm_linux: not-affected (3.11.0-12.19)
xenial_linux: not-affected (4.2.0-16.19)
esm-infra/xenial_linux: not-affected (4.2.0-16.19)
bionic_linux: not-affected (4.13.0-16.19)
disco_linux: ignored (reached end-of-life)
eoan_linux: released (5.3.0-42.34)
focal_linux: not-affected (5.4.0-18.22)
devel_linux: not-affected (5.4.0-26.30)

Patches_linux-hwe:
upstream_linux-hwe: released (5.6~rc1)
precise/esm_linux-hwe: DNE
trusty_linux-hwe: DNE
trusty/esm_linux-hwe: DNE
xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1)
esm-infra/xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1)
bionic_linux-hwe: released (5.3.0-42.34~18.04.1)
disco_linux-hwe: DNE
eoan_linux-hwe: DNE
focal_linux-hwe: DNE
devel_linux-hwe: DNE

Patches_linux-hwe-edge:
upstream_linux-hwe-edge: released (5.6~rc1)
precise/esm_linux-hwe-edge: DNE
trusty_linux-hwe-edge: DNE
trusty/esm_linux-hwe-edge: DNE
xenial_linux-hwe-edge: ignored (was needs-triage now end-of-life)
esm-infra/xenial_linux-hwe-edge: ignored (was needs-triage now end-of-life)
bionic_linux-hwe-edge: ignored (was needs-triage now end-of-life)
disco_linux-hwe-edge: DNE
eoan_linux-hwe-edge: DNE
focal_linux-hwe-edge: DNE
devel_linux-hwe-edge: DNE

Patches_linux-lts-xenial:
upstream_linux-lts-xenial: released (5.6~rc1)
precise/esm_linux-lts-xenial: DNE
trusty_linux-lts-xenial: ignored (out of standard support)
trusty/esm_linux-lts-xenial: not-affected (4.4.0-13.29~14.04.1)
xenial_linux-lts-xenial: DNE
bionic_linux-lts-xenial: DNE
disco_linux-lts-xenial: DNE
eoan_linux-lts-xenial: DNE
focal_linux-lts-xenial: DNE
devel_linux-lts-xenial: DNE

Patches_linux-lts-trusty:
upstream_linux-lts-trusty: released (5.6~rc1)
precise/esm_linux-lts-trusty: not-affected (3.13.0-24.46~precise1)
trusty_linux-lts-trusty: DNE
trusty/esm_linux-lts-trusty: DNE
xenial_linux-lts-trusty: DNE
bionic_linux-lts-trusty: DNE
disco_linux-lts-trusty: DNE
eoan_linux-lts-trusty: DNE
focal_linux-lts-trusty: DNE
devel_linux-lts-trusty: DNE

Patches_linux-oem:
upstream_linux-oem: released (5.6~rc1)
precise/esm_linux-oem: DNE
trusty_linux-oem: DNE
trusty/esm_linux-oem: DNE
xenial_linux-oem: ignored (was needs-triage now end-of-life)
bionic_linux-oem: not-affected (4.15.0-1002.3)
disco_linux-oem: ignored (reached end-of-life)
eoan_linux-oem: not-affected (4.15.0-1035.40)
focal_linux-oem: DNE
devel_linux-oem: DNE

Patches_linux-oem-osp1:
upstream_linux-oem-osp1: released (5.6~rc1)
precise/esm_linux-oem-osp1: DNE
trusty_linux-oem-osp1: DNE
trusty/esm_linux-oem-osp1: DNE
xenial_linux-oem-osp1: DNE
bionic_linux-oem-osp1: released (5.0.0-1043.48)
disco_linux-oem-osp1: ignored (reached end-of-life)
eoan_linux-oem-osp1: released (5.0.0-1043.48)
focal_linux-oem-osp1: DNE
devel_linux-oem-osp1: DNE

Patches_linux-kvm:
upstream_linux-kvm: released (5.6~rc1)
precise/esm_linux-kvm: DNE
trusty_linux-kvm: DNE
trusty/esm_linux-kvm: DNE
xenial_linux-kvm: not-affected (4.4.0-1004.9)
esm-infra/xenial_linux-kvm: not-affected (4.4.0-1004.9)
bionic_linux-kvm: not-affected (4.15.0-1002.2)
disco_linux-kvm: ignored (reached end-of-life)
eoan_linux-kvm: released (5.3.0-1012.13)
focal_linux-kvm: not-affected (5.4.0-1004.4)
devel_linux-kvm: not-affected (5.4.0-1009.9)

Patches_linux-aws:
upstream_linux-aws: released (5.6~rc1)
precise/esm_linux-aws: DNE
trusty_linux-aws: ignored (out of standard support)
trusty/esm_linux-aws: not-affected (4.4.0-1002.2)
xenial_linux-aws: not-affected (4.4.0-1001.10)
esm-infra/xenial_linux-aws: not-affected (4.4.0-1001.10)
bionic_linux-aws: not-affected (4.15.0-1001.1)
disco_linux-aws: ignored (reached end-of-life)
eoan_linux-aws: released (5.3.0-1013.14)
focal_linux-aws: not-affected (5.4.0-1005.5)
devel_linux-aws: not-affected (5.4.0-1009.9)

Patches_linux-aws-5.0:
upstream_linux-aws-5.0: released (5.6~rc1)
precise/esm_linux-aws-5.0: DNE
trusty_linux-aws-5.0: DNE
trusty/esm_linux-aws-5.0: DNE
xenial_linux-aws-5.0: DNE
bionic_linux-aws-5.0: released (5.0.0-1027.30)
disco_linux-aws-5.0: DNE
eoan_linux-aws-5.0: DNE
focal_linux-aws-5.0: DNE
devel_linux-aws-5.0: DNE

Patches_linux-aws-hwe:
upstream_linux-aws-hwe: released (5.6~rc1)
precise/esm_linux-aws-hwe: DNE
trusty_linux-aws-hwe: DNE
trusty/esm_linux-aws-hwe: DNE
xenial_linux-aws-hwe: not-affected (4.15.0-1030.31~16.04.1)
esm-infra/xenial_linux-aws-hwe: not-affected (4.15.0-1030.31~16.04.1)
bionic_linux-aws-hwe: DNE
disco_linux-aws-hwe: DNE
eoan_linux-aws-hwe: DNE
focal_linux-aws-hwe: DNE
devel_linux-aws-hwe: DNE

Patches_linux-azure:
upstream_linux-azure: released (5.6~rc1)
precise/esm_linux-azure: DNE
trusty_linux-azure: ignored (out of standard support)
trusty/esm_linux-azure: ignored (was needed ESM criteria)
xenial_linux-azure: not-affected (4.11.0-1009.9)
esm-infra/xenial_linux-azure: not-affected (4.11.0-1009.9)
bionic_linux-azure: released (5.0.0-1035.37)
disco_linux-azure: ignored (reached end-of-life)
eoan_linux-azure: released (5.3.0-1016.17)
focal_linux-azure: not-affected (5.4.0-1006.6)
devel_linux-azure: not-affected (5.4.0-1010.10)

Patches_linux-azure-5.3:
upstream_linux-azure-5.3: released (5.6~rc1)
precise/esm_linux-azure-5.3: DNE
trusty_linux-azure-5.3: DNE
trusty/esm_linux-azure-5.3: DNE
xenial_linux-azure-5.3: DNE
bionic_linux-azure-5.3: released (5.3.0-1016.17~18.04.1)
disco_linux-azure-5.3: DNE
eoan_linux-azure-5.3: DNE
focal_linux-azure-5.3: DNE
devel_linux-azure-5.3: DNE

Patches_linux-azure-edge:
upstream_linux-azure-edge: released (5.6~rc1)
precise/esm_linux-azure-edge: DNE
trusty_linux-azure-edge: DNE
trusty/esm_linux-azure-edge: DNE
xenial_linux-azure-edge: ignored (was needs-triage now end-of-life)
bionic_linux-azure-edge: ignored (was needs-triage now end-of-life)
disco_linux-azure-edge: DNE
eoan_linux-azure-edge: DNE
focal_linux-azure-edge: DNE
devel_linux-azure-edge: DNE

Patches_linux-gcp:
upstream_linux-gcp: released (5.6~rc1)
precise/esm_linux-gcp: DNE
trusty_linux-gcp: DNE
trusty/esm_linux-gcp: DNE
xenial_linux-gcp: not-affected (4.10.0-1004.4)
esm-infra/xenial_linux-gcp: not-affected (4.10.0-1004.4)
bionic_linux-gcp: released (5.0.0-1033.34)
disco_linux-gcp: ignored (reached end-of-life)
eoan_linux-gcp: released (5.3.0-1014.15)
focal_linux-gcp: not-affected (5.4.0-1005.5)
devel_linux-gcp: not-affected (5.4.0-1009.9)

Patches_linux-gcp-5.3:
upstream_linux-gcp-5.3: released (5.6~rc1)
precise/esm_linux-gcp-5.3: DNE
trusty_linux-gcp-5.3: DNE
trusty/esm_linux-gcp-5.3: DNE
xenial_linux-gcp-5.3: DNE
bionic_linux-gcp-5.3: released (5.3.0-1014.15~18.04.1)
disco_linux-gcp-5.3: DNE
eoan_linux-gcp-5.3: DNE
focal_linux-gcp-5.3: DNE
devel_linux-gcp-5.3: DNE

Patches_linux-gcp-edge:
upstream_linux-gcp-edge: released (5.6~rc1)
precise/esm_linux-gcp-edge: DNE
trusty_linux-gcp-edge: DNE
trusty/esm_linux-gcp-edge: DNE
xenial_linux-gcp-edge: DNE
bionic_linux-gcp-edge: ignored (was needs-triage now end-of-life)
disco_linux-gcp-edge: DNE
eoan_linux-gcp-edge: DNE
focal_linux-gcp-edge: DNE
devel_linux-gcp-edge: DNE

Patches_linux-gke-4.15:
upstream_linux-gke-4.15: released (5.6~rc1)
precise/esm_linux-gke-4.15: DNE
trusty_linux-gke-4.15: DNE
trusty/esm_linux-gke-4.15: DNE
xenial_linux-gke-4.15: DNE
bionic_linux-gke-4.15: not-affected (4.15.0-1030.32)
disco_linux-gke-4.15: DNE
eoan_linux-gke-4.15: DNE
focal_linux-gke-4.15: DNE
devel_linux-gke-4.15: DNE

Patches_linux-gke-5.0:
upstream_linux-gke-5.0: released (5.6~rc1)
precise/esm_linux-gke-5.0: DNE
trusty_linux-gke-5.0: DNE
trusty/esm_linux-gke-5.0: DNE
xenial_linux-gke-5.0: DNE
bionic_linux-gke-5.0: released (5.0.0-1032.33)
disco_linux-gke-5.0: DNE
eoan_linux-gke-5.0: DNE
focal_linux-gke-5.0: DNE
devel_linux-gke-5.0: DNE

Patches_linux-oracle:
upstream_linux-oracle: released (5.6~rc1)
precise/esm_linux-oracle: DNE
trusty_linux-oracle: DNE
trusty/esm_linux-oracle: DNE
xenial_linux-oracle: not-affected (4.15.0-1007.9~16.04.1)
esm-infra/xenial_linux-oracle: not-affected (4.15.0-1007.9~16.04.1)
bionic_linux-oracle: not-affected (4.15.0-1007.9)
disco_linux-oracle: ignored (reached end-of-life)
eoan_linux-oracle: released (5.3.0-1011.12)
focal_linux-oracle: not-affected (5.4.0-1005.5)
devel_linux-oracle: not-affected (5.4.0-1009.9)

Patches_linux-oracle-5.0:
upstream_linux-oracle-5.0: released (5.6~rc1)
precise/esm_linux-oracle-5.0: DNE
trusty_linux-oracle-5.0: DNE
trusty/esm_linux-oracle-5.0: DNE
xenial_linux-oracle-5.0: DNE
bionic_linux-oracle-5.0: released (5.0.0-1013.18)
disco_linux-oracle-5.0: DNE
eoan_linux-oracle-5.0: DNE
focal_linux-oracle-5.0: DNE
devel_linux-oracle-5.0: DNE

Patches_linux-raspi2:
upstream_linux-raspi2: released (5.6~rc1)
precise/esm_linux-raspi2: DNE
trusty_linux-raspi2: DNE
trusty/esm_linux-raspi2: DNE
xenial_linux-raspi2: not-affected (4.2.0-1013.19)
bionic_linux-raspi2: not-affected (4.13.0-1005.5)
disco_linux-raspi2: ignored (reached end-of-life)
eoan_linux-raspi2: released (5.3.0-1019.21)
focal_linux-raspi2: ignored (was needed now end-of-life)
devel_linux-raspi2: ignored (was needed now end-of-life)

Patches_linux-snapdragon:
upstream_linux-snapdragon: released (5.6~rc1)
precise/esm_linux-snapdragon: DNE
trusty_linux-snapdragon: DNE
trusty/esm_linux-snapdragon: DNE
xenial_linux-snapdragon: not-affected (4.4.0-1012.12)
bionic_linux-snapdragon: not-affected (4.4.0-1077.82)
disco_linux-snapdragon: ignored (reached end-of-life)
eoan_linux-snapdragon: DNE
focal_linux-snapdragon: DNE
devel_linux-snapdragon: DNE

Patches_linux-raspi2-5.3:
upstream_linux-raspi2-5.3: released (5.6~rc1)
precise/esm_linux-raspi2-5.3: DNE
trusty_linux-raspi2-5.3: DNE
trusty/esm_linux-raspi2-5.3: DNE
xenial_linux-raspi2-5.3: DNE
bionic_linux-raspi2-5.3: released (5.3.0-1019.21~18.04.1)
eoan_linux-raspi2-5.3: DNE
focal_linux-raspi2-5.3: DNE
devel_linux-raspi2-5.3: DNE

Patches_linux-oem-5.6:
upstream_linux-oem-5.6: released (5.6~rc1)
precise/esm_linux-oem-5.6: DNE
trusty_linux-oem-5.6: DNE
trusty/esm_linux-oem-5.6: DNE
xenial_linux-oem-5.6: DNE
bionic_linux-oem-5.6: DNE
eoan_linux-oem-5.6: DNE
focal_linux-oem-5.6: not-affected (5.6.0-1007.7)
devel_linux-oem-5.6: not-affected (5.6.0-1007.7)

Patches_linux-gke-5.3:
upstream_linux-gke-5.3: released (5.6~rc1)
precise/esm_linux-gke-5.3: DNE
trusty_linux-gke-5.3: DNE
trusty/esm_linux-gke-5.3: DNE
xenial_linux-gke-5.3: DNE
bionic_linux-gke-5.3: released (5.3.0-1014.15~18.04.1)
eoan_linux-gke-5.3: DNE
focal_linux-gke-5.3: DNE
devel_linux-gke-5.3: DNE

Patches_linux-oracle-5.3:
upstream_linux-oracle-5.3: released (5.6~rc1)
precise/esm_linux-oracle-5.3: DNE
trusty_linux-oracle-5.3: DNE
trusty/esm_linux-oracle-5.3: DNE
xenial_linux-oracle-5.3: DNE
bionic_linux-oracle-5.3: not-affected (5.3.0-1011.12~18.04.1)
eoan_linux-oracle-5.3: DNE
focal_linux-oracle-5.3: DNE
devel_linux-oracle-5.3: DNE