CVE-2018-10872

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.

• CWE-250
• CWE-119

• https://access.redhat.com/errata/RHSA-2018:2164Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10872Issue Tracking, Patch, Third Party Advisory
• https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://access.redhat.com/errata/RHSA-2018:2164Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10872Issue Tracking, Patch, Third Party Advisory
• https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
• https://www.oracle.com/security-alerts/cpujul2020.html

Published

Jul 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10867Files are accessible without restrictions from the /update/r…9.1
• CVE-2018-10868redhat-certification 7 does not properly restrict the number…7.5
• CVE-2018-10869redhat-certification does not properly restrict files that c…7.5
• CVE-2018-1087kernel KVM before versions kernel 4.16, kernel 4.16-rc7, ker…8
• CVE-2018-10870redhat-certification does not properly sanitize paths in rhc…9.8
• CVE-2018-10871389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable …3.8
• CVE-2018-10873A vulnerability was discovered in SPICE before version 0.14.…8.3
• CVE-2018-10874In ansible it was found that inventory variables are loaded …7.8
• CVE-2018-10875A flaw was found in ansible. ansible.cfg is read from the cu…7.8
• CVE-2018-10876A flaw was found in Linux kernel in the ext4 filesystem code…5
• CVE-2018-10877Linux kernel ext4 filesystem is vulnerable to an out-of-boun…7.3
• CVE-2018-10878A flaw was found in the Linux kernel's ext4 filesystem. A lo…7.8