In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 27, 2018 |
| Suse | — | Upgrade kernel-livepatch-4_12_14-23-default | Feb 4, 2022 | Jun 27, 2018 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1017-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1022-azureUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-33-genericUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-genericUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-4.15.0-33-snapdragon | Aug 31, 2018 | Jun 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub