CVEvulnerability
CVE-2017-7518
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-07-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-250, CWE-755
Description
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
Affected configurations
• redhat enterprise linux 7.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.4
• redhat enterprise linux server eus 7.4
• redhat enterprise linux server eus 7.5
• redhat enterprise linux workstation 7.0
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• debian debian linux 8.0
• debian debian linux 9.0
• linux linux kernel (< 4.12)
Related
References
- http://www.openwall.com/lists/oss-security/2017/06/23/5 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/99263 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038782 Third Party Advisory, VDB Entry
- https://access.redhat.com/articles/3290921 Permissions Required, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0395 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0412 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7518 Issue Tracking, Patch, Third Party Advisory
- https://usn.ubuntu.com/3619-1/ Third Party Advisory
- https://usn.ubuntu.com/3619-2/ Third Party Advisory
- https://usn.ubuntu.com/3754-1/ Third Party Advisory
- https://www.debian.org/security/2017/dsa-3981 Third Party Advisory
- https://www.spinics.net/lists/kvm/msg151817.html Mailing List, Patch
- http://www.openwall.com/lists/oss-security/2017/06/23/5 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/99263 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038782 Third Party Advisory, VDB Entry
- https://access.redhat.com/articles/3290921 Permissions Required, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0395 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0412 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7518 Issue Tracking, Patch, Third Party Advisory
- https://usn.ubuntu.com/3619-1/ Third Party Advisory
- https://usn.ubuntu.com/3619-2/ Third Party Advisory
- https://usn.ubuntu.com/3754-1/ Third Party Advisory
- https://www.debian.org/security/2017/dsa-3981 Third Party Advisory
- https://www.spinics.net/lists/kvm/msg151817.html Mailing List, Patch