A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Sep 11, 2018 |
| Debian | debian-upgrade-linux | Feb 19, 2019 | Sep 11, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | Nov 19, 2019 | Sep 11, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel | Aug 15, 2019 | Jun 5, 2018 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Aug 7, 2019 | Sep 11, 2018 |
| Suse | — | suse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azure | Aug 17, 2018 | Aug 16, 2018 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1021-gcpubuntu-upgrade-linux-image-4-15-0-1021-oemubuntu-upgrade-linux-image-4-15-0-1023-awsubuntu-upgrade-linux-image-4-15-0-1023-kvmubuntu-upgrade-linux-image-4-15-0-1024-raspi2ubuntu-upgrade-linux-image-4-15-0-36-genericubuntu-upgrade-linux-image-4-15-0-36-generic-lpaeubuntu-upgrade-linux-image-4-15-0-36-lowlatencyubuntu-upgrade-linux-image-4-15-0-36-snapdragonubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon | Oct 9, 2018 | Aug 17, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 11, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub