- Vulnerability/
- USN-3484-3
USN-3484-3: Linux kernel (GCP) vulnerability
First published: Tue Nov 21 2017(Updated: )
It was discovered that the KVM subsystem in the Linux kernel did not properly keep track of nested levels in guest page tables. A local attacker in a guest VM could use this to cause a denial of service (host OS crash) or possibly execute arbitrary code in the host OS.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-4.10.0-1009-gcp | <4.10.0-1009.9 | 4.10.0-1009.9 |
| Ubuntu gir1.2-packagekitglib-1.0 | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2017-12188
- https://ubuntu.com/security/notices/USN-3487-1
- https://ubuntu.com/security/notices/USN-3484-2
- https://ubuntu.com/security/notices/USN-3484-1
- https://ubuntu.com/security/notices/USN-3488-1
- https://launchpad.net/ubuntu/+source/linux-gcp/4.10.0-1009.9
- https://ubuntu.com/security/notices/USN-3484-3 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this Linux kernel vulnerability?
The vulnerability ID for this Linux kernel vulnerability is USN-3484-3.
What is the impact of this vulnerability?
This vulnerability can cause a denial of service (host OS crash) or potentially allow an attacker to execute arbitrary code in the host OS.
How can a local attacker exploit this vulnerability?
A local attacker in a guest VM can exploit this vulnerability by improperly keeping track of nested levels in guest page tables.
Which version of the Linux kernel is affected by this vulnerability?
The Linux kernel version 4.10.0-1009-gcp is affected by this vulnerability.
How can I fix this vulnerability?
To fix this vulnerability, you should update to Linux kernel version 4.10.0-1009.9 or higher.
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/event
- agent/references
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/16.04