oss-security - CVE-2018-10853 kernel: kvm: guest userspace to guest kernel write

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <nycvar.YSQ.7.76.1809030005140.14426@xnncv>
Date: Mon, 3 Sep 2018 00:10:05 +0530 (IST)
From: P J P <ppandit@...hat.com>
To: oss security list <oss-security@...ts.openwall.com>
cc: Andy Lutomirski <luto@...nel.org>, 
    Mika Penttilä <mika.penttila@...tfour.com>
Subject: CVE-2018-10853 kernel: kvm: guest userspace to guest kernel write

   Hello,

A flaw was found in the way Linux kernel KVM hypervisor emulated instructions 
such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) 
level while emulating unprivileged instructions.

An unprivileged guest user/process could use this flaw to potentially escalate 
privileges inside guest.

Upstream patch:
   -> https://git.kernel.org/linus/3c9fa24ca7c9c47605672916491f79e8ccacb9e6

Issue introduced in: (kernel v4.10+)
   -> https://git.kernel.org/linus/129a72a0d3c8e139a04512325384fe5ac119e74

This issue was reported by Andy Lutomirski and Mika Penttilä. CVE-2018-10853 
assigned by Red Hat Inc.

Thank you.
--
Prasad J Pandit / Red Hat Product Security Team
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.