CVE-2018-8897

Impact:
Moderate
Public Date:
2018-05-08
CWE:
CWE-250
Bugzilla:
1567074: CVE-2018-8897 Kernel: error in exception handling leads to DoS
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in the denial of service.

Find out more about CVE-2018-8897 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7, and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 5, 6, 7, and Red Hat Enterprise MRG 2 may address this issue.

CVSS v3 metrics

CVSS3 Base Score 6.5
CVSS3 Base Metrics CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Changed
Confidentiality None
Integrity Impact None
Availability Impact High

Red Hat Security Errata

Platform Errata Release Date
Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts (redhat-virtualization-host) RHSA-2018:1710 2018-05-23
Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts (rhev-hypervisor7) RHSA-2018:1711 2018-05-23
Red Hat Enterprise Linux Extended Update Support 6.7 (kernel) RHSA-2018:1346 2018-05-08
Red Hat Enterprise Linux Advanced Update Support 6.5 (kernel) RHSA-2018:1350 2018-05-08
Red Hat Enterprise Linux Extended Update Support 7.4 (kernel) RHSA-2018:1345 2018-05-08
Red Hat Enterprise Linux Advanced Update Support 6.4 (kernel) RHSA-2018:1349 2018-05-08
Red Hat Enterprise Linux Server Update Services for SAP Solutions 7.2 (kernel) RHSA-2018:1347 2018-05-08
Red Hat Enterprise Linux Advanced Update Support 6.6 (kernel) RHSA-2018:1351 2018-05-08
Red Hat Enterprise Linux Extended Update Support 7.3 (kernel) RHSA-2018:1348 2018-05-08
Red Hat Enterprise Linux 6 (kernel) RHSA-2018:1319 2018-05-08
RHEV Hypervisor for RHEL-6 (rhev-hypervisor7) RHSA-2018:1711 2018-05-23
Red Hat Enterprise Linux Server TUS (v. 6.6) (kernel) RHSA-2018:1351 2018-05-08
Red Hat MRG Grid for RHEL 6 Server v.2 (kernel-rt) RHSA-2018:1354 2018-05-08
Red Hat Enterprise Linux Server TUS (v. 7.2) (kernel) RHSA-2018:1347 2018-05-08
Red Hat Enterprise Linux Server (v. 5 ELS) (kernel) RHSA-2018:1353 2018-05-08
Red Hat Enterprise Linux for Real Time for NFV (v. 7) (kernel-rt) RHSA-2018:1355 2018-05-08
Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts RHSA-2018:1524 2018-05-15
Red Hat Enterprise Linux 7 (kernel) RHSA-2018:1318 2018-05-08
Red Hat Enterprise Linux Advanced Update Support 7.2 (kernel) RHSA-2018:1347 2018-05-08
Red Hat Enterprise Linux Long Life (v. 5.9 server) (kernel) RHSA-2018:1352 2018-05-08

Affected Packages State

Platform Package State
RHEV Manager 3 rhev-hypervisor-ng Affected
RHEV Manager 3 rhev-hypervisor Affected

Acknowledgements

Red Hat would like to thank Nick Peterson (Everdox Tech LLC) and Andy Lutomirski for reporting this issue.

External References

Last Modified
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.