Ubuntu.comUB:CVE-2018-12904CVE-2018-12904
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
4.9 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
0.001 Low
EPSS
Percentile
29.8%
In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested
virtualization is used, local attackers could cause L1 KVM guests to
VMEXIT, potentially allowing privilege escalations and denial of service
attacks due to lack of checking of CPL.
Bugs
Notes
| Author | Note |
|---|---|
| tyhicks | Ubuntu kernels do not enable nested KVM virtualization by default and are unaffected by this flaw in the default configuration. To ensure that nested virtualization is not enabled, verify that the /sys/module/kvm_intel/parameters/nested file contains “N”. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | linux | < 4.15.0-33.36 | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws | < 4.15.0-1020.20 | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-azure | < 4.15.0-1022.23 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-azure | < 4.15.0-1022.22~16.04.1 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-azure-edge | < 4.15.0-1022.23 | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-gcp | < 4.15.0-1018.19 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-gcp | < 4.15.0-1018.19~16.04.2 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-hwe | < 4.15.0-33.36~16.04.1 | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-hwe-edge | < 4.15.0-33.36~16.04.1 | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-kvm | < 4.15.0-1020.20 | UNKNOWN |
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=727ba748e110b4de50d142edca9d6a9b7e6111d8
launchpad.net/bugs/cve/CVE-2018-12904
nvd.nist.gov/vuln/detail/CVE-2018-12904
security-tracker.debian.org/tracker/CVE-2018-12904
ubuntu.com/security/notices/USN-3752-1
ubuntu.com/security/notices/USN-3752-2
ubuntu.com/security/notices/USN-3752-3
www.cve.org/CVERecord?id=CVE-2018-12904
Related
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
4.9 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
0.001 Low
EPSS
Percentile
29.8%