CVEvulnerability
CVE-2018-1087
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-05-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.0 HIGH — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-250
Description
kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.
Affected configurations
• linux linux kernel 4.16
• linux linux kernel 4.17
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 17.10
• debian debian linux 8.0
• debian debian linux 9.0
• redhat enterprise linux 7.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 7.2
• redhat enterprise linux server aus 7.3
• redhat enterprise linux server aus 7.4
• redhat enterprise linux server eus 7.3
• redhat enterprise linux server eus 7.4
• redhat enterprise linux server eus 7.5
• redhat enterprise linux server tus 7.2
• redhat enterprise linux server tus 7.3
• redhat enterprise linux server tus 7.4
• redhat enterprise linux virtualization 4.0
• redhat enterprise linux workstation 7.0
Related
Weakness · CWE (1)
- CWE-250 Execution with Unnecessary Privileges weakness
References
- http://www.openwall.com/lists/oss-security/2018/05/08/5 Mailing List
- http://www.securityfocus.com/bid/104127 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040862 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1318 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1345 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1347 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1348 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1355 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1524 Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/pop_ss Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1087 Issue Tracking
- https://usn.ubuntu.com/3641-1/ Third Party Advisory
- https://usn.ubuntu.com/3641-2/ Third Party Advisory
- https://www.debian.org/security/2018/dsa-4196 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2018/05/08/5 Mailing List
- http://www.securityfocus.com/bid/104127 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040862 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1318 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1345 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1347 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1348 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1355 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1524 Third Party Advisory
- https://access.redhat.com/security/vulnerabilities/pop_ss Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1087 Issue Tracking
- https://usn.ubuntu.com/3641-1/ Third Party Advisory
- https://usn.ubuntu.com/3641-2/ Third Party Advisory
- https://www.debian.org/security/2018/dsa-4196 Third Party Advisory