CVE-2018-19406: kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through 4.19.2 allows local users to cause a de...

Security readout for executives and security teams

CVE-2018-19406 is a Linux kernel KVM flaw that can let a local user crash an affected system. The available sources describe denial of service only, not data theft or remote compromise. Business urgency depends on whether exposed servers allow untrusted local users or workloads. Likely exposure is Linux systems running affected kernels through 4.19.2, especially KVM hosts or environments where untrusted users can execute local code. The source bundle does not provide vendor-specific package names, distributions, or CPEs. Treat as a targeted availability risk, not a confirmed breach risk. Prioritize shared virtualization hosts and systems with untrusted local access; defer isolated, non-KVM systems after vendor guidance review. Mitigation focus: Inventory Linux kernels and flag versions through 4.19.2.; Check Linux distribution and vendor advisories for fixed kernel packages.; Prioritize KVM hosts with untrusted local users or tenant workloads..

Prepared

Jun 6, 2026, 22:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.