CVE-2018-1087

Advisory lineage Upstream: 0 Downstream: 47
Modified
Published: 15 May 2018, 16:00
Last modified:05 Aug 2024, 03:51

Vulnerability Summary

Overall Risk (default)
medium
32/100
CVSS Score
8 HIGH
v3.0 (cve.org)
EPSS Score
0.03% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

15 May 2018, 16:00
Published
Vulnerability first disclosed
05 Aug 2024, 03:51
Last Modified
Vulnerability information updated

Description

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.

CVSS Metrics

  • v3.0•HIGH•Score: 8CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v3.0•HIGH•Score: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.03%• Percentile: 9%

Techniques & Countermeasures

  • CWE-250•Execution with Unnecessary Privileges

    The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 17.10

  • debian•debian_linux

    8.0 | 9.0

  • kernel•kvm

    kernel 4.16 | kernel 4.16-rc7 | kernel 4.17-rc1 | kernel 4.17-rc2 | kernel 4.17-rc3

  • linux•linux_kernel

    4.1.6 | 4.16:rc7 | 4.17:rc1 | 4.17:rc2 | 4.17:rc3

  • redhat•enterprise_linux

    7.0

  • redhat•enterprise_linux_desktop

    7.0

  • redhat•enterprise_linux_server

    7.0

  • redhat•enterprise_linux_server_aus

    7.2 | 7.3 | 7.4

  • redhat•enterprise_linux_server_eus

    7.3 | 7.4 | 7.5

  • redhat•enterprise_linux_server_tus

    7.2 | 7.3 | 7.4

  • redhat•enterprise_linux_virtualization

    4.0

  • redhat•enterprise_linux_workstation

    7.0

References (14)