Skip to content
OpenAdvisories
High · 7.8 CVE-2018-10901 EUVD-2018-2958GHSA-8j5h-gvcc-pfhw

A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, bu…

Published Jul 26, 2018 · Updated Aug 5, 2024 · Assigned by redhat

Vendor: [UNKNOWN] Product: kernel: Package: linux-azure-edge Ecosystem: Ubuntu

Description

A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.

Affected products

VendorProductAffectedFixed
[UNKNOWN] kernel: — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS linux-azure-edge No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 perf +16 2.6.32-754.3.5.el6 RHSA-2018:2390
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 6.7 EUS perf +16 2.6.32-573.60.4.el6 RHSA-2018:2391
RHEL 6.6 TUS perf +10 2.6.32-504.72.4.el6 RHSA-2018:2392
RHEL 6.6 AUS perf +10 2.6.32-504.72.4.el6 RHSA-2018:2392
RHEL 6.5 AUS perf +10 2.6.32-431.91.3.el6 RHSA-2018:2393
RHEL 6.4 AUS perf +9 2.6.32-358.91.4.el6 RHSA-2018:2394

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 perf +7 4.14.33-59.34.amzn2 ALAS2-2018-994

Advisories 7

References