Rapid7

vulnerability

Amazon Linux AMI: CVE-2017-17741: Security patch for kernel ((Multiple Advisories))

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
Dec 18, 2017
Added
Feb 1, 2018
Modified
Oct 14, 2022

Description

The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h.

Solution

amazon-linux-upgrade-kernel

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.