arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Apr 27, 2020 | Oct 7, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 7, 2018 |
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Oct 7, 2018 |
| Debian | — | Upgrade linux | Oct 10, 2018 | Oct 7, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | Oct 3, 2018 |
| Redhat_linux | — | Upgrade kernel | Nov 27, 2018 | Oct 7, 2018 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-oemUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency | Nov 23, 2018 | Oct 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub