CVE-2018-16882: Use After Free
A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled. In nestedgetvmcs12pages(), in case of an error while processing posted interrupt address, it unmaps the 'pidescpage' without resetting 'pidesc' descriptor address, which is later used in pitestandclearon(). A guest user/process could use this flaw to crash the host kernel resulting in DoS or potentially gain privileged access to a system. Kernel versions before 4.14.91 and before 4.19.13 are vulnerable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 7.1.13-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.14.91 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.19.13
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16882?
CVE-2018-16882 is classified as a high severity vulnerability due to its potential to allow malicious actors to execute arbitrary code on the host system.
How do I fix CVE-2018-16882?
To fix CVE-2018-16882, update the Linux kernel to a fixed version such as 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.10-1.
Which software is affected by CVE-2018-16882?
CVE-2018-16882 affects specific versions of the Linux kernel and certain distributions like Ubuntu 14.04, 16.04, 18.04, and 18.10.
What type of vulnerability is CVE-2018-16882?
CVE-2018-16882 is a use-after-free vulnerability in the Linux kernel's KVM hypervisor.
How does CVE-2018-16882 impact virtualization?
CVE-2018-16882 can impact nested virtualization by incorrectly handling posted interrupts, potentially leading to system instability or remote code execution.