The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.
CVSS Details
- CVSS 3.0 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Sep 20, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Sep 26, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernel-oriUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | Sep 26, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 2, 2017 | Sep 12, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 11, 2018 | Sep 20, 2017 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-man | Oct 18, 2017 | Sep 20, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500Upgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-4.4.0-1033-gke | Oct 31, 2017 | Sep 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub