CVE-2018-1087 vulnerability in Canonical and Other Products
Published on May 15, 2018
kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
NVD
Weakness Type
Execution with Unnecessary Privileges
The software performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Products Associated with CVE-2018-1087
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-1087 are published in these products:
Affected Versions
kernel KVM:- Version kernel 4.16 is affected.
- Version kernel 4.16-rc7 is affected.
- Version kernel 4.17-rc1 is affected.
- Version kernel 4.17-rc2 is affected.
- Version kernel 4.17-rc3 is affected.
Exploit Probability
EPSS
0.04%
Percentile
11.23%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.