ISOMAN

CVE

CVE-2018-10853

A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.

Severity
HIGH
CVSS
7
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html
  2. https://access.redhat.com/errata/RHSA-2019:2029
  3. https://access.redhat.com/errata/RHSA-2019:2043
  4. https://access.redhat.com/errata/RHSA-2020:0036
  5. https://access.redhat.com/errata/RHSA-2020:0103
  6. https://access.redhat.com/errata/RHSA-2020:0179
  7. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853
  8. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74
  9. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6
  10. https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
  11. https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
  12. https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html
  13. https://usn.ubuntu.com/3777-1/
  14. https://usn.ubuntu.com/3777-2/
  15. https://www.openwall.com/lists/oss-security/2018/09/02/1
  16. http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html
  17. https://access.redhat.com/errata/RHSA-2019:2029
  18. https://access.redhat.com/errata/RHSA-2019:2043
  19. https://access.redhat.com/errata/RHSA-2020:0036
  20. https://access.redhat.com/errata/RHSA-2020:0103