kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo | Apr 27, 2020 | May 15, 2018 |
| Amazon_linux | — | Upgrade kernel | May 31, 2018 | May 9, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2018 | May 9, 2018 |
| Debian | — | Upgrade linux | May 10, 2018 | May 8, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | May 10, 2018 | May 8, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo | May 10, 2018 | May 8, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo | May 17, 2018 | May 15, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 9, 2018 | May 8, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 9, 2018 | May 8, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-extra | May 9, 2018 | May 9, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1092-snapdragonUpgrade linux-image-4.4.0-124-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.13.0-1016-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-3.13.0-147-powerpc64-smpUpgrade linux-image-highbankUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-147-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-1089-raspi2Upgrade linux-image-4.4.0-124-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-124-powerpc64-embUpgrade linux-image-4.4.0-124-generic-lpaeUpgrade linux-image-3.2.0-134-generic-paeUpgrade linux-image-4.4.0-124-genericUpgrade linux-image-3.13.0-147-powerpc-e500mcUpgrade linux-image-3.13.0-147-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-147-genericUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-124-powerpc-smpUpgrade linux-image-4.13.0-41-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.13.0-1019-raspi2Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-147-generic-lpaeUpgrade linux-image-3.13.0-147-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-3.2.0-134-omapUpgrade linux-image-3.2.0-134-highbankUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1057-awsUpgrade linux-image-generic-paeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-124-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-3.2.0-134-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.13.0-41-generic-lpaeUpgrade linux-image-4.13.0-1015-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-omapUpgrade linux-image-4.13.0-1026-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-9027-euclidUpgrade linux-image-euclidUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-147-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1023-kvmUpgrade linux-image-powerpcUpgrade linux-image-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-3.2.0-134-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.13.0-41-lowlatencyUpgrade linux-image-4.4.0-1019-awsUpgrade linux-image-3.2.0-134-genericUpgrade linux-image-3.2.0-134-powerpc64-smp | May 17, 2018 | May 8, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 15, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub