UBUNTU-CVE-2017-7518
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
02 / AFFECTED SOFTWARE
Affected packages
136 explicit affected versions
9 explicit affected versions
49 explicit affected versions
70 explicit affected versions
30 explicit affected versions
5 explicit affected versions
26 explicit affected versions
10 explicit affected versions
44 explicit affected versions
41 explicit affected versions
26 explicit affected versions
51 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
7 explicit affected versions
7 explicit affected versions
8 explicit affected versions
7 explicit affected versions
1 explicit affected versions
61 explicit affected versions
3 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
05 / REFERENCES
Further evidence
- http://www.openwall.com/lists/oss-security/2017/06/23/5
- https://bugzilla.redhat.com/show_bug.cgi?id=1464473
- https://ubuntu.com/security/CVE-2017-7518
- https://ubuntu.com/security/notices/USN-3619-1
- https://ubuntu.com/security/notices/USN-3619-2
- https://ubuntu.com/security/notices/USN-3754-1
- https://www.cve.org/CVERecord?id=CVE-2017-7518
- https://www.spinics.net/lists/kvm/msg151817.html