CVE-2018-10901: High severity linux kernel vulnerability
A flaw was found in Linux kernel in the KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. This can lead to a privilege escalation.
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3444d7da1839b851eefedd372978d8a982316c36
Other sources
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10901?
CVE-2018-10901 is classified with a high severity due to the potential for privilege escalation and system compromise.
How do I fix CVE-2018-10901?
To fix CVE-2018-10901, update the Linux kernel to version 2.6.36 or later.
What systems are affected by CVE-2018-10901?
CVE-2018-10901 affects Linux kernel versions up to 2.6.36 and several versions of Red Hat Enterprise Linux.
What is the impact of CVE-2018-10901?
The impact of CVE-2018-10901 includes the ability for a host's userspace code to manipulate the Global Descriptor Table (GDT) and possibly execute arbitrary code.
When was CVE-2018-10901 disclosed?
CVE-2018-10901 was disclosed in 2018 as part of security updates for the Linux kernel.