Linux kernel vulnerability

2017-11-2100:00:00

ubuntu.com

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

Releases

Ubuntu 17.04

Packages

linux - Linux kernel
linux-raspi2 - Linux kernel for Raspberry Pi 2

Details

It was discovered that the KVM subsystem in the Linux kernel did not
properly keep track of nested levels in guest page tables. A local attacker
in a guest VM could use this to cause a denial of service (host OS crash)
or possibly execute arbitrary code in the host OS.

OSVersionArchitecturePackageVersionFilename
Ubuntu17.04noarchlinux-image-4.10.0-40-generic< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchblock-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchcrypto-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchfat-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchfb-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchfirewire-core-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchfloppy-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchfs-core-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchfs-secondary-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN
Ubuntu17.04noarchinput-modules-4.10.0-40-generic-di< 4.10.0-40.44UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	17.04	noarch	linux-image-4.10.0-40-generic	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	block-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	crypto-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	fat-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	fb-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	firewire-core-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	floppy-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	fs-core-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	fs-secondary-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN
Ubuntu	17.04	noarch	input-modules-4.10.0-40-generic-di	< 4.10.0-40.44	UNKNOWN