CVE-2017-12154

2017-09-2600:00:00

ubuntu.com

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

24.1%

JSON

The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel
through 4.13.3 does not ensure that the “CR8-load exiting” and “CR8-store
exiting” L0 vmcs02 controls exist in cases where L1 omits the “use TPR
shadow” vmcs12 control, which allows KVM L2 guest OS users to obtain read
and write access to the hardware CR8 register.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchlinux< 4.13.0-17.20UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-153.203UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-98.121UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1039.48UNKNOWN
ubuntu16.04noarchlinux-azure< 4.13.0-1005.7UNKNOWN
ubuntu16.04noarchlinux-gcp< 4.13.0-1002.5UNKNOWN
ubuntu16.04noarchlinux-gke< 4.4.0-1033.33UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.13.0-26.29~16.04.2UNKNOWN
ubuntu18.04noarchlinux-hwe-edge< 4.18.0-8.9~18.04.1UNKNOWN
ubuntu16.04noarchlinux-hwe-edge< 4.13.0-26.29~16.04.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	17.10	noarch	linux	< 4.13.0-17.20	UNKNOWN
ubuntu	14.04	noarch	linux	< 3.13.0-153.203	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-98.121	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1039.48	UNKNOWN
ubuntu	16.04	noarch	linux-azure	< 4.13.0-1005.7	UNKNOWN
ubuntu	16.04	noarch	linux-gcp	< 4.13.0-1002.5	UNKNOWN
ubuntu	16.04	noarch	linux-gke	< 4.4.0-1033.33	UNKNOWN
ubuntu	16.04	noarch	linux-hwe	< 4.13.0-26.29~16.04.2	UNKNOWN
ubuntu	18.04	noarch	linux-hwe-edge	< 4.18.0-8.9~18.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-hwe-edge	< 4.13.0-26.29~16.04.2	UNKNOWN