Summary
Nick Peterson discovered that the Linux kernel did not
properly handle debug exceptions following a MOV/POP to SS
instruction. A local attacker could use this to cause a denial
of service (system crash). This issue only affected the amd64
architecture. (CVE-2018-8897)
Andy Lutomirski discovered that the KVM subsystem of the Linux kernel
did not properly emulate the ICEBP instruction following a MOV/POP
to SS instruction. A local attacker in a KVM virtual machine could
use this to cause a denial of service (guest VM crash) or possibly
escalate privileges inside of the virtual machine. This issue only
affected the i386 and amd64 architectures. (CVE-2018-1087)
Andy Lutomirski discovered that the Linux kernel did not properly
perform error handling on virtualized debug registers. A local
attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2018-1000199)
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | linux | 3.13.0-147.196 |
| Ubuntu · 14.04 LTS 14.04:LTS | linux-aws | 4.4.0-1019.19 |
| Ubuntu · 14.04 LTS 14.04:LTS | linux-lts-xenial | 4.4.0-124.148~14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-124.148 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1057.66 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.13.0-1016.19 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-euclid | 4.4.0-9027.29 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.13.0-1015.19 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.13.0-41.46~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1023.28 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oem | 4.13.0-1026.29 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1089.97 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1092.97 |
Vulnerabilities 3
-
High 8.0
kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulner…
-
Unscored —CVE-2018-1000199 Public exploit
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result…
-
Unscored —
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) w…