kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-r ...

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.

ELSA-2018-4096: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP2)

Security update for the Linux Kernel

Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 3 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP3)

Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP2)

Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2)