PT-2018-2986 · Linux+3 · Linux Kernel+3

Cfir Cohen · Published 2018-12-18 · Updated 2023-01-19 · CVE-2018-16882

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.91 Linux kernel versions prior to 4.19.13

Description The issue is related to a use-after-free problem in the Linux kernel's KVM hypervisor when processing posted interrupts with nested virtualization enabled. This could allow an attacker to crash the host kernel, resulting in a denial of service, or potentially gain privileged access to the system.

Recommendations For Linux kernel versions prior to 4.14.91, update to version 4.14.91 or later to resolve the issue. For Linux kernel versions prior to 4.19.13, update to version 4.19.13 or later to resolve the issue. As a temporary workaround, consider disabling nested virtualization until a patch is available.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2019-1046

ALT-PU-2019-1048

ALT-PU-2019-1139

BDU:2019-03248

CVE-2018-16882

MGASA-2019-0097

MGASA-2019-0098

MGASA-2019-0171

SUSE-SU-2021:3929-1

SUSE-SU-2021:3935-1

USN-3871-1

USN-3871-2

USN-3871-3

USN-3871-4

USN-3871-5

USN-3872-1

USN-3878-1

USN-3878-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 222

• 🔥 https://github.com/mmxsrup/CVE-2019-5489 · Exploit
• https://ubuntu.com/security/CVE-2018-18281 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3871-3 · Vendor Advisory
• https://usn.ubuntu.com/3871-4 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16882 · Patch
• https://advisories.mageia.org/MGASA-2019-0097.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3935-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3871-2 · Vendor Advisory
• https://usn.ubuntu.com/3871-5 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10876 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10879 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10880 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-16882 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10882 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-17972 · Vendor Advisory