Date: Mon, 3 Sep 2018 00:10:05 +0530 (IST) From: P J P <ppandit@...hat.com> To: oss security list <oss-security@...ts.openwall.com> cc: Andy Lutomirski <luto@...nel.org>, Mika Penttilä <mika.penttila@...tfour.com> Subject: CVE-2018-10853 kernel: kvm: guest userspace to guest kernel write Hello, A flaw was found in the way Linux kernel KVM hypervisor emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest. Upstream patch: -> https://git.kernel.org/linus/3c9fa24ca7c9c47605672916491f79e8ccacb9e6 Issue introduced in: (kernel v4.10+) -> https://git.kernel.org/linus/129a72a0d3c8e139a04512325384fe5ac119e74 This issue was reported by Andy Lutomirski and Mika Penttilä. CVE-2018-10853 assigned by Red Hat Inc. Thank you. -- Prasad J Pandit / Red Hat Product Security Team 47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.