CVE-2017-12188
Last modified
CVE-2017-12188 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an "MMU potential stack buffer overrun.". EPSS estimates a 0.44% chance of exploitation in the next 30 days.
Description
arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an "MMU potential stack buffer overrun."
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.6, < 4.9.57 |
| Linux | Linux Kernel | >= 4.10, < 4.13.8 |
References
- http://www.securityfocus.com/bid/101267Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:0395Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0412Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1500380Issue Tracking, Patch, Third Party Advisory
- https://patchwork.kernel.org/patch/9996579/Issue Tracking, Patch, Vendor Advisory
- https://patchwork.kernel.org/patch/9996587/Issue Tracking, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/101267Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:0395Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:0412Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1500380Issue Tracking, Patch, Third Party Advisory
- https://patchwork.kernel.org/patch/9996579/Issue Tracking, Patch, Vendor Advisory
- https://patchwork.kernel.org/patch/9996587/Issue Tracking, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-12188?
How severe is CVE-2017-12188?
How do I fix CVE-2017-12188?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-12182xorg-x11-server before 1.19.5 was missing length validation …
- CVE-2017-12183xorg-x11-server before 1.19.5 was missing length validation …
- CVE-2017-12184xorg-x11-server before 1.19.5 was missing length validation …
- CVE-2017-12185xorg-x11-server before 1.19.5 was missing length validation …
- CVE-2017-12186xorg-x11-server before 1.19.5 was missing length validation …
- CVE-2017-12187xorg-x11-server before 1.19.5 was missing length validation …
- CVE-2017-12189It was discovered that the jboss init script as used in Red …
- CVE-2017-1219IBM Tivoli Endpoint Manager is vulnerable to a XML External …
- CVE-2017-12190The bio_map_user_iov and bio_unmap_user functions in block/b…
- CVE-2017-12191A flaw was found in the CloudForms account configuration whe…
- CVE-2017-12192The keyctl_read_key function in security/keys/keyctl.c in th…
- CVE-2017-12193The assoc_array_insert_into_terminal_node function in lib/as…
Are you affected by CVE-2017-12188?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST