Wind River Support Network

HomeDefectsLIN10-4796
Fixed

LIN10-4796 : Security Advisory - linux - CVE-2018-18021

Created: Oct 15, 2018    Updated: Dec 16, 2018
Resolved Date: Nov 18, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.13
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Kernel

Description

arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.

https://nvd.nist.gov/vuln/detail/CVE-2018-18021

Other Downloads


CVEs


Live chat
Online