PT-2017-13983

CVE-2017-15306

·

Published

2017-11-02

·

Updated

2018-07-09

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.11
Description The issue allows local users to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This can be achieved by making a KVM CHECK EXTENSION KVM CAP PPC HTM ioctl call to the /dev/kvm API endpoint.
Recommendations For Linux kernel versions prior to 4.13.11, update to version 4.13.11 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2017-2561
ALT-PU-2018-1991
RHSA-2018:0654
USN-3507-1
USN-3507-2
Found an issue in the description? Have something to add? Feel free to write us 👾