VDB-107131 · CVE-2017-12154 · BID 100856

Linux Kernel up to 4.13.3 CR8 arch/x86/kvm/vmx.c prepare_vmcs02 access control

A vulnerability has been found in Linux Kernel up to 4.13.3 (Operating System) and classified as critical. Affected by this vulnerability is the function prepare_vmcs02 of the file arch/x86/kvm/vmx.c of the component CR8 Handler. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10820014	01/14/2021	VulD...	cvss2_nvd_basescore	3.6	nist.gov	01/14/2021	accepted	90
10820013	01/14/2021	VulD...	person_name	Jim Mattson	securityfocus.com	01/14/2021	accepted	70
7139346	11/19/2019	VulD...	securityfocus_class	Failure to Handle Exceptional Conditions	securityfocus.com	11/19/2019	accepted	100
7139345	11/19/2019	VulD...	securityfocus_date	1505174400 (09/12/2017)	securityfocus.com	11/19/2019	accepted	100
7139337	11/19/2019	VulD...	date	1505865600 (09/20/2017)		11/19/2019	accepted	100
7139334	11/19/2019	VulD...	confirm_url	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51aa68e7d57e3217192d88ce90fd5b8ef29ec94f	git.kernel.org	11/19/2019	accepted	100
7139333	11/19/2019	VulD...	company_name	Google		11/19/2019	accepted	100
7139332	11/19/2019	VulD...	person_nickname	Matt		11/19/2019	accepted	100
7139291	11/19/2019	VulD...	discoverydate	1505433600		11/19/2019	accepted	100
7139370	09/26/2017	VulD...	cvss3_nvd_basescore	7.1	nist.gov	09/26/2017	accepted	90
7139369	09/26/2017	VulD...	0day_days	5		09/26/2017	accepted	90
7139368	09/26/2017	VulD...	cvss3_vuldb_rc	C		09/26/2017	accepted	90
7139367	09/26/2017	VulD...	cvss3_vuldb_rl	O		09/26/2017	accepted	90
7139366	09/26/2017	VulD...	cvss3_vuldb_e	X		09/26/2017	accepted	90
7139365	09/26/2017	VulD...	cvss2_vuldb_rc	C		09/26/2017	accepted	90
7139364	09/26/2017	VulD...	cvss2_vuldb_rl	OF		09/26/2017	accepted	90
7139363	09/26/2017	VulD...	cvss2_vuldb_e	ND		09/26/2017	accepted	90
7139361	09/26/2017	VulD...	seealso	102802 103034 104449 104864 105193 105278 105605 105607 105731 106083 106127 106121 106273 106733 106736 106930 107472 109137 109138 111673		09/26/2017	accepted	100
7139360	09/26/2017	VulD...	qualys_title	Amazon Linux Security Advisory for kernel: ALAC2012-2018-013	qualys.com	09/26/2017	accepted	100