Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.0 | High | 3.0 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | CNA (redhat) |
- CISA KEV Not listed.
- EPSS 0.0044, the 38th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- www.oracle.com/security-alerts/cpuApr2021.html
- cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.114
- cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37
- cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10
- bugs.chromium.org/p/project-zero/issues/detail?id=1790
- security.netapp.com/advisory/ntap-20200608-0001/
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14898