arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an "MMU potential stack buffer overrun."
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 13, 2018 | Oct 11, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 11, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf | Nov 30, 2017 | Oct 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Dec 4, 2017 | Oct 11, 2017 |
| Oracle_linux | — | Upgrade kernel | Mar 9, 2018 | Oct 10, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 7, 2018 | Oct 11, 2017 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.11.0-1015-azureUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-4.10.0-1009-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-4.10.0-1021-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.10.0-40-genericUpgrade linux-image-4.10.0-40-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.13.0-17-genericUpgrade linux-image-4.10.0-40-generic-lpae | Nov 21, 2017 | Oct 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub