CVE-2018-12904: Medium severity Linux Linux kernel vulnerability
In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.17.2
Event History
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2018-12904.
What is the description of this vulnerability?
This vulnerability in the Linux kernel before 4.17.2 allows local attackers to cause privilege escalations and denial of service attacks in L1 KVM guests due to lack of checking of CPL when nested virtualization is used.
What is the affected software?
The affected software includes Linux kernel versions before 4.17.2.
How can this vulnerability be exploited?
This vulnerability can be exploited by local attackers using nested virtualization to cause L1 KVM guests to VMEXIT, potentially leading to privilege escalations and denial of service attacks.
What is the recommended remedy for this vulnerability?
The recommended remedy is to update the Linux kernel to version 4.17.2 or later.