5.5
Moyenne
CVE-2017-7518 A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in…
Description
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kernel: | 4.12 | Pas de correctif indiqué |
Références
- RHSA-2018:0412 access.redhat.com
- access.redhat.com access.redhat.com
- USN-3619-2 usn.ubuntu.com
- RHSA-2018:0395 access.redhat.com
- USN-3754-1 usn.ubuntu.com
- 1038782 www.securitytracker.com
- bugzilla.redhat.com bugzilla.redhat.com
- [oss-security] 20170623 CVE-2017-7518 Kernel: KVM: debug exception via syscall emulation www.openwall.com
- USN-3619-1 usn.ubuntu.com
- DSA-3981 www.debian.org
- [kvm] 20170622 [PATCH] KVM: x86: fix singlestepping over syscall www.spinics.net
- 99263 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Kernel:
Les 6 CVE de Kernel: →
CVE-2018-16884
A flaw was found in the Linux kernel's NFS41+ subsystem
6.5
Moyenne
CVE-2018-14646
The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the…
5.5
Moyenne
CVE-2018-16862
A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final…
5.3
Moyenne
CVE-2017-7482
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the…
7.1
Élevée