vulnerability

Ubuntu: (Multiple Advisories) (CVE-2017-7518): Linux kernel vulnerabilities

Severity
5
CVSS
(AV:L/AC:L/Au:N/C:P/I:P/A:P)
Published
Jul 8, 2017
Added
Apr 25, 2018
Modified
Aug 18, 2025

Description

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.

Solutions

ubuntu-upgrade-linux-image-3-13-0-157-genericubuntu-upgrade-linux-image-3-13-0-157-generic-lpaeubuntu-upgrade-linux-image-3-13-0-157-lowlatencyubuntu-upgrade-linux-image-3-13-0-157-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-157-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-157-powerpc-smpubuntu-upgrade-linux-image-3-13-0-157-powerpc64-embubuntu-upgrade-linux-image-3-13-0-157-powerpc64-smpubuntu-upgrade-linux-image-4-4-0-1016-awsubuntu-upgrade-linux-image-4-4-0-1020-kvmubuntu-upgrade-linux-image-4-4-0-1054-awsubuntu-upgrade-linux-image-4-4-0-1086-raspi2ubuntu-upgrade-linux-image-4-4-0-1088-snapdragonubuntu-upgrade-linux-image-4-4-0-119-genericubuntu-upgrade-linux-image-4-4-0-119-generic-lpaeubuntu-upgrade-linux-image-4-4-0-119-lowlatencyubuntu-upgrade-linux-image-4-4-0-119-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-119-powerpc-smpubuntu-upgrade-linux-image-4-4-0-119-powerpc64-embubuntu-upgrade-linux-image-4-4-0-119-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.