PT-2017-12369 · Linux+5 · Linux Kernel+5

Published 2017-09-20 · Updated 2023-02-12 · CVE-2017-12154

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.3

Description The issue arises from the prepare vmcs02 function in arch/x86/kvm/vmx.c, which fails to ensure the existence of "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls when L1 omits the "use TPR shadow" vmcs12 control. This allows KVM L2 guest OS users to gain unauthorized read and write access to the hardware CR8 register.

Recommendations For Linux kernel versions prior to 4.13.3, update to version 4.13.3 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Related Identifiers

ALT-PU-2017-2337

ALT-PU-2017-2375

ALT-PU-2017-2378

ALT-PU-2017-2379

ALT-PU-2018-1991

CESA-2018_1062

CVE-2017-12154

DLA-1099-1

DSA-3981-1

MGASA-2017-0381

MGASA-2017-0383

MGASA-2017-0384

MGASA-2017-0386

MGASA-2017-0387

MGASA-2017-0388

OPENSUSE-SU-2017_2739-1

OPENSUSE-SU-2017_2741-1

RHSA-2018:0676

RHSA-2018:1062

RHSA-2018_0676

RHSA-2018_1062

RHSA-2019:1946

SUSE-SU-2017:2847-1

SUSE-SU-2017:2869-1

SUSE-SU-2017:2908-1

SUSE-SU-2017:2920-1

SUSE-SU-2017:2956-1

USN-3469-1

USN-3469-2

USN-3487-1

USN-3698-1

USN-3698-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 477

• https://github.com/torvalds/linux/commit/51aa68e7d57e3217192d88ce90fd5b8ef29ec94f · Patch
• https://usn.ubuntu.com/3698-1 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1491224 · Patch
• https://access.redhat.com/errata/RHSA-2019:1946 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-10911 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0676 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-12154 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3469-2 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0387.html · Security Note
• https://ubuntu.com/security/CVE-2017-14156 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3981-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0387 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-6927 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-7757 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3469-1 · Vendor Advisory