UBUNTU-CVE-2017-17741

Details

The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h.

Affected Packages(26 packages)

linux

Ubuntu 14.04 LTS

Fixed in:

3.13.0-144.193

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1016.16

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-119.143~14.04.1

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-119.143

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1054.63

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1014.17

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1012.16

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.13.0-41.46~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1020.25

linux-oem

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1022.24

References

REPORT

https://ubuntu.com/security/CVE-2017-17741

ADVISORY

https://ubuntu.com/security/notices/USN-3617-1

ADVISORY

https://ubuntu.com/security/notices/USN-3617-2

ADVISORY

https://ubuntu.com/security/notices/USN-3617-3

ADVISORY

https://ubuntu.com/security/notices/USN-3619-1

ADVISORY

https://ubuntu.com/security/notices/USN-3619-2

ADVISORY

https://ubuntu.com/security/notices/USN-3620-1

ADVISORY

https://ubuntu.com/security/notices/USN-3620-2

ADVISORY

https://ubuntu.com/security/notices/USN-3632-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2017-17741

REPORT

https://www.spinics.net/lists/kvm/msg160710.html