CVE-2017-12154

The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0…

published September 26, 2017

CVSS
—
EPSS
1%
Percentile
42.5
In the wild
Unconfirmed
What it is

The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00512 · 42.5th percentile
Published
2017-09-26T05:00Z
EPSS history
Timeline
  • 26 SEP 05:00Z
    The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0…
    cvelistv5