CVE-2017-12188: Buffer Overflow

Published Oct 10, 2017
·
Updated

arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an "MMU potential stack buffer overrun."

Other sources

Linux kernel built with the KVM virtualisation support(CONFIGKVM), with nested virtualisation(nVMX) feature enabled(nested=1), is vulnerable to a stack buffer overflow issue. It could occur while traversing guest pagetable entries to resolve guest virtual address(gva).

A L1 guest could use this flaw to crash the host kernel resulting in DoS. OR potentially execute arbitrary code on the host to gain access to the host system.

Upstream patch: --------------- -> https://www.spinics.net/lists/kvm/msg156651.html

Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/10/12/17

Red Hat

Affected Software

4 affected componentsFixes available
Linux Linux kernel>=4.6<4.9.57
Linux Linux kernel>=4.10<4.13.8
Linux Linux kernel<=4.13.5
debian/linux
5.10.223-15.10.234-16.1.129-16.1.133-16.12.21-16.12.22-1

Event History

Oct 10, 2017
Data Sourced
via Red Hat·01:20 PM
DescriptionSeverityAffected Software
Oct 11, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Jan 11, 2024
Data Sourced
via Launchpad·10:26 PM
Description
Oct 6, 2024
Data Sourced
via Ubuntu·01:22 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2017-12188.

2

What is the severity of CVE-2017-12188?

CVE-2017-12188 has a severity rating of high.

3

How does CVE-2017-12188 impact the Linux kernel?

CVE-2017-12188 allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service.

4

How can I fix CVE-2017-12188?

To fix CVE-2017-12188, update your Linux kernel to version 4.14.x or higher.

5

Where can I find more information about CVE-2017-12188?

You can find more information about CVE-2017-12188 at the following references: [1] [2] [3]

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203