FlawAtlas
Search the atlas
UBUNTU-CVE-2017-7518 High

UBUNTU-CVE-2017-7518

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.

Exploit probability Not scored
Published June 23, 2017
Required by Not available
Last source change August 17, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:14.04:LTS linux

136 explicit affected versions

Ubuntu:14.04:LTS linux-aws

9 explicit affected versions

Ubuntu:14.04:LTS linux-lts-xenial

49 explicit affected versions

Ubuntu:16.04:LTS linux

70 explicit affected versions

Ubuntu:16.04:LTS linux-aws

30 explicit affected versions

Ubuntu:16.04:LTS linux-gcp

5 explicit affected versions

Ubuntu:16.04:LTS linux-hwe

26 explicit affected versions

Ubuntu:16.04:LTS linux-kvm

10 explicit affected versions

Ubuntu:16.04:LTS linux-raspi2

44 explicit affected versions

Ubuntu:16.04:LTS linux-snapdragon

41 explicit affected versions

Ubuntu:20.04:LTS linux-azure-fde

26 explicit affected versions

Ubuntu:20.04:LTS linux-gke

51 explicit affected versions

Ubuntu:20.04:LTS linux-raspi2

6 explicit affected versions

Ubuntu:20.04:LTS linux-riscv

12 explicit affected versions

Ubuntu:22.04:LTS linux-intel-iot-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-riscv

23 explicit affected versions

Ubuntu:24.04:LTS linux-azure-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-gcp-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-hwe-6.11

8 explicit affected versions

Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-raspi-realtime

1 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15

61 explicit affected versions

Ubuntu:Pro:FIPS:16.04:LTS linux-fips

3 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2017-7518

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.

View original source

05 / REFERENCES

Further evidence