CVE-2018-10853

 

Published at: - 11-09-2018 04:29

Last modified: - 26-10-2022 01:44

Total changes: - 3

Description

A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.openwall.com/lists/oss-security/2018/09/02/1
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853
• [debian-lts-announce] 20180718 [SECURITY] [DLA 1423-1] linux-4.9 new package-Mailing List, Third Party Advisory
• [debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update-Mailing List, Third Party Advisory
• [debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update-Mailing List, Third Party Advisory
• USN-3777-2-Third Party Advisory
• USN-3777-1-Third Party Advisory
• openSUSE-SU-2019:1407-
• RHSA-2019:2043-
• RHSA-2019:2029-
• RHSA-2020:0036-
• RHSA-2020:0103-
• RHSA-2020:0179-

 

Keywords

NVD

 

CVE-2018-10853

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures