UBUNTU-CVE-2017-15306

Description

The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a KVM_CHECK_EXTENSION KVM_CAP_PPC_HTM ioctl call to /dev/kvm.

CVSS Metrics

• v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Systems

• ubuntu•linux-azure

  < 4.13.0-1005.7

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-gcp

  < 4.13.0-1002.5

• ubuntu•linux-gke

  all

• ubuntu•linux-hwe

  < 4.13.0-32.35~16.04.1 | all

• ubuntu•linux-hwe-edge

  all

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-oem

  < 4.13.0-1010.11

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all | all

References (4)

• https://ubuntu.com/security/CVE-2017-15306
• https://ubuntu.com/security/notices/USN-3507-1
• https://ubuntu.com/security/notices/USN-3507-2
• https://www.cve.org/CVERecord?id=CVE-2017-15306