Homepage

Incorrect Authorization The advisory has been revoked - it doesn't affect any version of package linux-gcp-6.18  (opens in a new tab)

Threat Intelligence

EPSS
0.36% (28th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CHAINGUARDLATEST-LINUXGCP618-14909041
  • published10 Jan 2026
  • disclosed9 Apr 2019
Report a new vulnerability Found a mistake?

Introduced: 9 Apr 2019

CVE-2019-3887  (opens in a new tab)
CWE-863  (opens in a new tab)

Amendment

The Chainguard security team deemed this advisory irrelevant for Chainguard:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream linux-gcp-6.18 package and not the linux-gcp-6.18 package as distributed by Chainguard.

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.