CVE-2017-12188CWE-121

arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a…

published October 11, 2017

CVSS
—
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an "MMU potential stack buffer overrun."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2017-10-11T15:00Z
EPSS history
Timeline
  • 11 OCT 15:00Z
    arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a…
    cvelistv5