CVE-2017-7518

Advisory lineage Upstream: 0 Downstream: 21
Modified
Published: 30 Jul 2018, 13:00
Last modified:05 Aug 2024, 16:04

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.0 (nvd)
EPSS Score
0.09% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

30 Jul 2018, 13:00
Published
Vulnerability first disclosed
05 Aug 2024, 16:04
Last Modified
Vulnerability information updated

Description

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
  • v3.0•HIGH•Score: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.09%• Percentile: 26%

Techniques & Countermeasures

  • CWE-755•Improper Handling of Exceptional Conditions

    The product does not handle or incorrectly handles an exceptional condition.

  • CWE-250•Execution with Unnecessary Privileges

    The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04

  • debian•debian_linux

    8.0 | 9.0

  • linux•linux_kernel

    < 4.12

  • redhat•enterprise_linux

    7.0

  • redhat•enterprise_linux_desktop

    7.0

  • redhat•enterprise_linux_server

    7.0

  • redhat•enterprise_linux_server_aus

    7.4

  • redhat•enterprise_linux_server_eus

    7.4 | 7.5

  • redhat•enterprise_linux_workstation

    7.0

  • [unknown]•kernel:

    4.12

References (12)