The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.
CVSS Details
- CVSS 3.0 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Sep 20, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Sep 26, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perfUpgrade kernel-oriUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfo | Nov 30, 2017 | Sep 26, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 2, 2017 | Sep 12, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 11, 2018 | Sep 20, 2017 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-source-azure | Oct 18, 2017 | Sep 20, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-genericUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-kvmUpgrade linux-image-4.4.0-98-lowlatency | Oct 31, 2017 | Sep 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub