ByteOS Network

CVE Vulnerability Details :

CVE-2018-10853

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-11 Sep, 2018 | 14:00

Updated At-05 Aug, 2024 | 07:46

▼CVE Numbering Authority (CNA)

A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potentially escalate privileges inside guest.

Affected Products

Vendor

Linux Kernel Organization, Inc

Product

kernel

Versions

Affected

4.18

Problem Types

Type	CWE ID	Description
CWE	CWE-250	CWE-250

Type: CWE

CWE ID: CWE-250

Description: CWE-250

Metrics

Version	Base score	Base severity	Vector
3.0	7.0	HIGH	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Version: 3.0

Base score: 7.0

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html	mailing-list x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853	x_refsource_CONFIRM
https://usn.ubuntu.com/3777-1/	vendor-advisory x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html	mailing-list x_refsource_MLIST
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list x_refsource_MLIST
https://usn.ubuntu.com/3777-2/	vendor-advisory x_refsource_UBUNTU
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6	x_refsource_CONFIRM
https://www.openwall.com/lists/oss-security/2018/09/02/1	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html	vendor-advisory x_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0036	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0103	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0179	vendor-advisory x_refsource_REDHAT

Hyperlink: https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853

Resource:

x_refsource_CONFIRM

Hyperlink: https://usn.ubuntu.com/3777-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74

Resource:

x_refsource_CONFIRM

Hyperlink: https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://usn.ubuntu.com/3777-2/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.openwall.com/lists/oss-security/2018/09/02/1

Resource:

x_refsource_MISC

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2043

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2029

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2020:0036

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2020:0103

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2020:0179

Resource:

vendor-advisory

x_refsource_REDHAT

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html	mailing-list x_refsource_MLIST x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10853	x_refsource_CONFIRM x_transferred
https://usn.ubuntu.com/3777-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html	mailing-list x_refsource_MLIST x_transferred
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a04512325384fe5ac119e74	x_refsource_CONFIRM x_transferred
https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html	mailing-list x_refsource_MLIST x_transferred
https://usn.ubuntu.com/3777-2/	vendor-advisory x_refsource_UBUNTU x_transferred
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c9fa24ca7c9c47605672916491f79e8ccacb9e6	x_refsource_CONFIRM x_transferred
https://www.openwall.com/lists/oss-security/2018/09/02/1	x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html	vendor-advisory x_refsource_SUSE x_transferred
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2020:0036	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2020:0103	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2020:0179	vendor-advisory x_refsource_REDHAT x_transferred