Published: 11/10/2017 Updated: 02/04/2024

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

CVSS v3 Base Score: 7.8 | Impact Score: 6 | Exploitability Score: 1.1

VMScore: 614

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

arch/x86/kvm/mmu.c in the Linux kernel up to and including 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an "MMU potential stack buffer overrun."

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

The system could be made to crash or run programs as an administrator ...

Several security issues were fixed in the Linux kernel ...

The Linux kernel built with the KVM visualization support (CONFIG_KVM), with nested visualization(nVMX) feature enabled (nested=1), was vulnerable to a stack buffer overflow issue The vulnerability could occur while traversing guest page table entries to resolve guest virtual address(gva) An L1 guest could use this flaw to crash the host kernel r ...

CWE-121 https://patchwork.kernel.org/patch/9996587/https://patchwork.kernel.org/patch/9996579/https://bugzilla.redhat.com/show_bug.cgi?id=1500380 http://www.securityfocus.com/bid/101267 https://access.redhat.com/errata/RHSA-2018:0412 https://access.redhat.com/errata/RHSA-2018:0395 https://access.redhat.com/errata/RHSA-2018:0395 https://nvd.nist.gov https://usn.ubuntu.com/3484-1/

CVE-2017-12188

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect