A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 13, 2018 | Jul 8, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Jul 8, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2019 | Jul 30, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 9, 2018 | Jun 22, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 7, 2018 | Jul 8, 2017 |
| Suse | — | Upgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-build | Jul 8, 2017 | Jul 8, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-3.13.0-157-powerpc-e500Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-e500mcUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-3.13.0-157-generic-lpaeUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-157-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-157-lowlatencyUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-awsUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-157-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-157-powerpc64-embUpgrade linux-image-3.13.0-157-genericUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-powerpc64-emb | Apr 25, 2018 | Jul 8, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub