arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Apr 27, 2020 | Oct 7, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 7, 2018 |
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Oct 7, 2018 |
| Debian | — | Upgrade linux | Oct 10, 2018 | Oct 7, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | Oct 3, 2018 |
| Redhat_linux | — | Upgrade kernel | Nov 27, 2018 | Oct 7, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-awsUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1034-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-genericUpgrade linux-image-4.4.0-139-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.15.0-1041-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1072-aws | Nov 23, 2018 | Oct 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub