Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Mon, 3 Sep 2018 00:10:05 +0530 (IST)
From: P J P <>
To: oss security list <>
cc: Andy Lutomirski <>, 
    Mika Penttilä <>
Subject: CVE-2018-10853 kernel: kvm: guest userspace to guest kernel write


A flaw was found in the way Linux kernel KVM hypervisor emulated instructions 
such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) 
level while emulating unprivileged instructions.

An unprivileged guest user/process could use this flaw to potentially escalate 
privileges inside guest.

Upstream patch:

Issue introduced in: (kernel v4.10+)

This issue was reported by Andy Lutomirski and Mika Penttilä. CVE-2018-10853 
assigned by Red Hat Inc.

Thank you.
Prasad J Pandit / Red Hat Product Security Team
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.