The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Sep 20, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Sep 26, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-oriUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debug | Nov 30, 2017 | Sep 26, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 2, 2017 | Sep 12, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 11, 2018 | Sep 20, 2017 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-base | Oct 18, 2017 | Sep 20, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-genericUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-powerpc-e500Upgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-4.4.0-98-powerpc64-emb | Oct 31, 2017 | Sep 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub