Skip to content
OpenAdvisories

Description

A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.

Affected products

VendorProductAffectedFixed
Linux kernel 4.18 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 4.16.16-1 —
Debian 13 linux 4.16.16-1 —
Debian 12 linux 4.16.16-1 —
Debian 8 linux 3.16.57-1 DLA-1422-1
Debian 8 linux-4.9 4.9.110-1~deb8u1 DLA-1423-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-gcp-6.11 +4 No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-36.39 USN-3777-1
Ubuntu 18.04 LTS linux-aws +1 4.15.0-1023.23 USN-3777-1
Ubuntu 18.04 LTS linux-azure 4.15.0-1025.26 —
Ubuntu 18.04 LTS linux-gcp 4.15.0-1021.22 USN-3777-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1021.24 USN-3777-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1024.26 USN-3777-1
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1053.57 —
Ubuntu 16.04 LTS linux 4.4.0-133.159 —
Ubuntu 16.04 LTS linux-aws 4.4.0-1065.75 —
Ubuntu 16.04 LTS linux-azure 4.15.0-1025.26~16.04.1 —
Ubuntu 16.04 LTS linux-gcp 4.15.0-1021.22~16.04.1 USN-3777-2
Ubuntu 16.04 LTS linux-hwe 4.15.0-36.39~16.04.1 USN-3777-2
Ubuntu 16.04 LTS linux-kvm 4.4.0-1031.37 —
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1094.102 —
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1098.103 —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS linux-aws 4.4.0-1027.30 —
Ubuntu 14.04 LTS linux-azure 4.15.0-1031.32~14.04.1 —
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-133.159~14.04.1 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1008.10 —
Ubuntu Pro 14.04 LTS linux No fix yet —
ReleasePackageFixed inAdvisory
RHEL 7 kernel +15 3.10.0-1062.el7 RHSA-2019:2029
RHEL 7 kernel-rt +10 3.10.0-1062.rt56.1022.el7 RHSA-2019:2043
RHEL 7 perf +3 3.10.0-957.43.1.el7 RHSA-2020:0179, RHSA-2019:2029
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.6 EUS perf +19 3.10.0-957.43.1.el7 RHSA-2020:0179
RHEL 7.5 EUS perf +18 3.10.0-862.46.1.el7 RHSA-2020:0036
RHEL 7.4 TUS perf +11 3.10.0-693.62.1.el7 RHSA-2020:0103
RHEL 7.4 E4S perf +13 3.10.0-693.62.1.el7 RHSA-2020:0103
RHEL 7.4 AUS perf +11 3.10.0-693.62.1.el7 RHSA-2020:0103
ReleasePackageFixed inAdvisory
SLES 15 kernel-azure +2 4.12.14-5.13.1 SUSE-SU-2018:2450-1
SLES 15 kernel-docs +6 4.12.14-25.16.1 SUSE-SU-2018:2539-1
SLES 15 lttng-modules 2.10.0-5.6.1 SUSE-SU-2018:2539-1
SLES 12 SP3 kernel-docs +1 4.4.178-94.91.2 SUSE-SU-2019:1245-1
SLES 12 SP3 kernel-syms +2 4.4.178-94.91.1 SUSE-SU-2019:1245-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.95.1 SUSE-SU-2018:3084-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_13 11-2.1 SUSE-SU-2018:2387-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 9-2.1 SUSE-SU-2018:2391-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 8-2.1 SUSE-SU-2018:2416-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 6-2.1 SUSE-SU-2018:2391-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_20 5-2.1 SUSE-SU-2018:2389-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 4-2.1 SUSE-SU-2018:2389-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_23 +1 2-2.1 SUSE-SU-2018:2684-1, SUSE-SU-2018:2389-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_25 1-3.4.1 SUSE-SU-2018:3084-1
SLES 12 SP2 lttng-modules 2.7.1-9.6.1 SUSE-SU-2018:3084-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.104.1 SUSE-SU-2018:2908-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_20 11-2.1 SUSE-SU-2018:2355-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_21 10-2.1 SUSE-SU-2018:2350-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_22 8-2.1 SUSE-SU-2018:2353-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_23 7-2.1 SUSE-SU-2018:2367-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 6-2.1 SUSE-SU-2018:2368-1, SUSE-SU-2018:2363-1, SUSE-SU-2018:2359-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_27 4-2.1 SUSE-SU-2018:2348-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_28 +1 3-2.1 SUSE-SU-2018:2364-1, SUSE-SU-2018:2358-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_30 2-2.1 SUSE-SU-2018:2684-1
SLES 12 kernel-ec2 +4 3.12.61-52.146.1 SUSE-SU-2018:3083-1, SUSE-SU-2018:2908-1
SLES 12 kgraft-patch-SLE12_Update_26 11-2.1 SUSE-SU-2018:2352-1
SLES 12 kgraft-patch-SLE12_Update_27 10-2.1 SUSE-SU-2018:2346-1
SLES 12 kgraft-patch-SLE12_Update_28 +1 8-2.1 SUSE-SU-2018:2351-1, SUSE-SU-2018:2347-1
SLES 12 kgraft-patch-SLE12_Update_30 +2 7-2.1 SUSE-SU-2018:2356-1, SUSE-SU-2018:2354-1, SUSE-SU-2018:2349-1
SLES 12 kgraft-patch-SLE12_Update_33 6-2.1 SUSE-SU-2018:2341-1
SLES 12 kgraft-patch-SLE12_Update_34 4-2.1 SUSE-SU-2018:2345-1
SLES 12 kgraft-patch-SLE12_Update_35 +1 3-2.1 SUSE-SU-2018:2369-1, SUSE-SU-2018:2342-1
SLES 12 kgraft-patch-SLE12_Update_37 2-2.1 SUSE-SU-2018:2684-1
SLES 12 kgraft-patch-SLE12_Update_38 1-1.5.1 SUSE-SU-2018:3083-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP3 kernel-default 4.4.178-94.91.2 SUSE-SU-2019:1245-1
SLES for SAP 12 SP3 kernel-syms +1 4.4.178-94.91.1 SUSE-SU-2019:1245-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.95.1 SUSE-SU-2018:3084-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_13 11-2.1 SUSE-SU-2018:2387-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 9-2.1 SUSE-SU-2018:2391-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 8-2.1 SUSE-SU-2018:2416-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 6-2.1 SUSE-SU-2018:2391-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_20 5-2.1 SUSE-SU-2018:2389-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 4-2.1 SUSE-SU-2018:2389-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_23 +1 2-2.1 SUSE-SU-2018:2684-1, SUSE-SU-2018:2389-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_25 1-3.4.1 SUSE-SU-2018:3084-1
SLES for SAP 12 SP2 lttng-modules 2.7.1-9.6.1 SUSE-SU-2018:3084-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.104.1 SUSE-SU-2018:2908-2
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_20 11-2.1 SUSE-SU-2018:2355-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_21 10-2.1 SUSE-SU-2018:2350-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_22 8-2.1 SUSE-SU-2018:2353-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_23 7-2.1 SUSE-SU-2018:2367-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 6-2.1 SUSE-SU-2018:2368-1, SUSE-SU-2018:2363-1, SUSE-SU-2018:2359-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_27 4-2.1 SUSE-SU-2018:2348-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_28 +1 3-2.1 SUSE-SU-2018:2364-1, SUSE-SU-2018:2358-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_30 2-2.1 SUSE-SU-2018:2684-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_31 1-2.5.1 SUSE-SU-2018:2908-2
SLE Live Patching 15 kernel-default 4.12.14-25.16.1 SUSE-SU-2018:2538-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_0 2-4.1 SUSE-SU-2018:2474-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_1 2-2.1 SUSE-SU-2018:2472-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_2 3-2.1 SUSE-SU-2018:2678-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_3 2-2.2 SUSE-SU-2018:2935-1, SUSE-SU-2018:2933-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_4 1-1.3.1 SUSE-SU-2018:2538-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_1 11-2.1 SUSE-SU-2018:2413-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_10 +1 5-2.1 SUSE-SU-2018:2414-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_12 +1 3-2.1 SUSE-SU-2018:2414-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_2 +1 10-2.1 SUSE-SU-2018:2413-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_25 1-4.3.1 SUSE-SU-2019:1245-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_4 9-2.1 SUSE-SU-2018:2416-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_5 +2 8-2.1 SUSE-SU-2018:2416-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_8 +1 6-2.1 SUSE-SU-2018:2416-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.95.1 SUSE-SU-2018:3084-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_25 1-3.4.1 SUSE-SU-2018:3084-1
SUSE OpenStack Cloud 7 lttng-modules 2.7.1-9.6.1 SUSE-SU-2018:3084-1
SUSE Enterprise Storage 4 kernel-syms +2 4.4.121-92.95.1 SUSE-SU-2018:3084-1
SUSE Enterprise Storage 4 kgraft-patch-SLE12-SP2_Update_25 1-3.4.1 SUSE-SU-2018:3084-1
SUSE Enterprise Storage 4 lttng-modules 2.7.1-9.6.1 SUSE-SU-2018:3084-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 perf +12 3.10.0-1062.el7 ELSA-2019-2029

Advisories 50

References