CVE-2018-10901 — Improper Initialization in Kernel

Vendor	Product	Version range	Fixed in
debian	linux	—	—
linux	linux_kernel	< 2.6.36	2.6.36
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_server_aus	—	—
redhat	enterprise_linux_server_aus	—	—
redhat	enterprise_linux_server_aus	—	—
redhat	enterprise_linux_workstation	—	—

GHSA

GHSA-8j5h-gvcc-pfhw: A flaw was found in Linux kernel's KVM virtualization subsystem

ghsa_unreviewed·2022-05-13

CVE-2018-10901 [HIGH] GHSA-8j5h-gvcc-pfhw: A flaw was found in Linux kernel's KVM virtualization subsystem A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.

OSV

CVE-2018-10901: A flaw was found in Linux kernel's KVM virtualization subsystem

osv·2018-07-26·CVSS 7.8

CVE-2018-10901 [HIGH] CVE-2018-10901: A flaw was found in Linux kernel's KVM virtualization subsystem A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.

Debian

CVE-2018-10901: linux - A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code do...

vendor_debian·2018·CVSS 7.8

CVE-2018-10901 [HIGH] CVE-2018-10901: linux - A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code do... A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

Red Hat

kernel: kvm: vmx: host GDT limit corruption

vendor_redhat·2010-08-02·CVSS 7.8

CVE-2018-10901 [HIGH] CWE-665 kernel: kvm: vmx: host GDT limit corruption kernel: kvm: vmx: host GDT limit corruption A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges. A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges. Package: kernel (Red Ha

CVE-2018-10901: A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to…

Affected

CVSS provenance