PT-2018-2986 · Linux+3 · Linux Kernel+3

Cfir Cohen

·

Publicado

2018-12-18

·

Atualizado

2023-01-19

·

CVE-2018-16882

CVSS v3.1

8.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.91 Linux kernel versions prior to 4.19.13
Description The issue is related to a use-after-free problem in the Linux kernel's KVM hypervisor when processing posted interrupts with nested virtualization enabled. This could allow an attacker to crash the host kernel, resulting in a denial of service, or potentially gain privileged access to the system.
Recommendations For Linux kernel versions prior to 4.14.91, update to version 4.14.91 or later to resolve the issue. For Linux kernel versions prior to 4.19.13, update to version 4.19.13 or later to resolve the issue. As a temporary workaround, consider disabling nested virtualization until a patch is available.

Exploit

Correção

DoS

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2019-1046
ALT-PU-2019-1048
ALT-PU-2019-1139
BDU:2019-03248
CVE-2018-16882
MGASA-2019-0097
MGASA-2019-0098
MGASA-2019-0171
SUSE-SU-2021:3929-1
SUSE-SU-2021:3935-1
USN-3871-1
USN-3871-2
USN-3871-3
USN-3871-4
USN-3871-5
USN-3872-1
USN-3878-1
USN-3878-2

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu