CVE-2018-10872
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch...
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.
- Record
CVE-2018-10872- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Weakness
- CWE-250
- Updated
- 2026-11-02
EUVDEUVD-2018-2938
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.
- Record
EUVD-2018-2938- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-652g-78m6-29wq
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch...
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.
- Record
GHSA-652g-78m6-29wq- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119, CWE-250
- Updated
- 2026-11-02
NVD
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.
- Record
CVE-2018-10872- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-250, CWE-119
- Updated
- 2026-11-02
OSVRHSA-2018:2164
Red Hat Security Advisory: kernel security and bug fix update
- Record
RHSA-2018:2164- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-10872
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch is executed. An unprivileged system user could use this flaw to crash the system kernel resulting in DoS. This CVE-2018-10872 was assigned due to regression of CVE-2018-8897 in Red Hat Enterprise Linux 6.10 GA kernel. No other versions are affected by this CVE.
- Record
UBUNTU-CVE-2018-10872- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
Show 60 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:2.6.32-754.2.1.el6 | 0:2.6.32-754.2.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-10872 is a medium vulnerability (CVSS 6.5) in Linux Kernel, published July 10, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. No source names a fixed version.
References
access.redhat.com/errata/RHSA-2018:2164
oracle.com/security-alerts/cpujul2020.html
help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10872
nvd.nist.gov/vuln/detail/CVE-2018-10872
Show 26 moreShow less
github.com/advisories/GHSA-652g-78m6-29wq
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2164.json
cve.org/CVERecord?id=CVE-2018-3639
bugs.chromium.org/p/project-zero/issues/detail?id=1528
software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf
intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
openwall.com/lists/oss-security/2018/06/15/5
ubuntu.com/security/CVE-2018-10872