PT-2017-10943 · Linux+5 · Linux Kernel+5

Jan H. Schã¶Nherr · Published 2017-09-20 · Updated 2019-10-03 · CVE-2017-1000252

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.3

Description The issue allows guest OS users to cause a denial of service, leading to an assertion failure, and potentially causing the hypervisor to hang or crash. This is related to an out-of-bounds guest irq value in the KVM subsystem, specifically in the files arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.

Recommendations For Linux kernel versions prior to 4.13.3, update to version 4.13.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the KVM subsystem to minimize the risk of exploitation.

Fix

DoS

Assertion Failure

RCE

Weakness Enumeration

CWE-617

CWE-20

Related Identifiers

ALT-PU-2017-2337

ALT-PU-2017-2375

ALT-PU-2017-2378

ALT-PU-2017-2379

ALT-PU-2018-1991

CESA-2018_1062

CVE-2017-1000252

DSA-3981-1

MGASA-2017-0381

MGASA-2017-0383

MGASA-2017-0384

MGASA-2017-0386

MGASA-2017-0387

MGASA-2017-0388

OPENSUSE-SU-2017_2739-1

OPENSUSE-SU-2017_2741-1

RHSA-2018:0676

RHSA-2018:1062

RHSA-2018:1130

RHSA-2018_0676

RHSA-2018_1062

SUSE-SU-2017:2847-1

SUSE-SU-2017:2869-1

SUSE-SU-2017:2956-1

SUSE-SU-2017_2847-1

SUSE-SU-2017_2869-1

USN-3468-1

USN-3468-2

USN-3468-3

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 359

• https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb · Patch
• https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563 · Patch
• https://ubuntu.com/security/notices/USN-3468-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-10911 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0676 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-11176 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0387.html · Security Note
• https://osv.dev/vulnerability/DSA-3981-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0387 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1490781 · Patch
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563 · Patch
• https://osv.dev/vulnerability/USN-3468-3 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2847-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000252 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-1000252 · Security Note