CVE-2018-10901

A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.

Link	Resource
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3444d7da1839b851eefedd372978d8a982316c36	Patch Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10901	Issue Tracking Patch
http://www.securityfocus.com/bid/104905	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:2394	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2393	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2392	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2391	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2390	Third Party Advisory
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0	Third Party Advisory
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	Third Party Advisory

Configuration 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

---

Published : 2018-07-26 05:29

Updated : 2023-02-24 06:43

---

NVD link : CVE-2018-10901

Mitre link : CVE-2018-10901

Enterprise Linux Workstation

Redhat

NVD-CWE-noinfo