CVE-2017-7518 Privilege escalation in Kernel:
A flaw in the Linux kernel KVM module allows guest users to escalate privileges within the guest by exploiting syscall emulation handling of the trap flag.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-7518?
CVE-2017-7518 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 30 Jul 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
Which versions are affected by CVE-2017-7518?
It affects 9 products.
Products include Canonical Ubuntu Linux, Debian Debian Linux, Linux kernel, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server and 3 more.
How do I fix CVE-2017-7518?
Apply the vendor's patch.
Is CVE-2017-7518 being exploited?
There is no known exploitation of CVE-2017-7518 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2017-7518, GHSA-hwr9-p63p-wq87, UBUNTU-CVE-2017-7518.