NetSight
IP …
high8.0

CVE-2018-1087

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kern…

Impact

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 4.16, 4.17
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10
DebianDebian Linux
Versions 8.0, 9.0
RedhatEnterprise Linux
Version 7.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5
RedhatEnterprise Linux Server Tus
Versions 7.2, 7.3, 7.4
RedhatEnterprise Linux Virtualization
Version 4.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-250

References