CVE-2018-10901
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore...
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.8
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
- Record
CVE-2018-10901- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-665
- Updated
- 2026-11-02
EUVDEUVD-2018-2958
7.8
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
- Record
EUVD-2018-2958- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8j5h-gvcc-pfhw
7.8
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore...
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
- Record
GHSA-8j5h-gvcc-pfhw- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD
7.8
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
- Record
CVE-2018-10901- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-665
- Updated
- 2026-11-02
OSVRHSA-2018:2390
7.8
Red Hat Security Advisory: kernel security and bug fix update
- Record
RHSA-2018:2390- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2391
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2018:2391- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2018:2392
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2018:2392- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2393
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2018:2393- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2394
7.8
Red Hat Security Advisory: kernel security update
- Record
RHSA-2018:2394- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-10901
7.8
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
- Record
UBUNTU-CVE-2018-10901- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
Show 158 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-754.3.5.el6 | 0:2.6.32-754.3.5.el6 |
kernelRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-abi-whitelistsRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debugRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debug-develRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debuginfo-common-i686Red Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-develRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-docRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-firmwareRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-headersRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
perfRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
perf-debuginfoRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
python-perfRed Hat:rhel_eus:6.7::computenode From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernelRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-abi-whitelistsRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-bootwrapperRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debugRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debug-develRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debuginfo-common-i686Red Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debuginfo-common-ppc64Red Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debuginfo-common-s390xRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-develRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-docRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-firmwareRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-headersRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-kdumpRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-kdump-debuginfoRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernel-kdump-develRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
perfRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
perf-debuginfoRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
python-perfRed Hat:rhel_eus:6.7::server From an advisory covering 3 CVEs |
before 0:2.6.32-573.60.4.el6 | 0:2.6.32-573.60.4.el6 |
kernelRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-abi-whitelistsRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debugRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debug-debuginfoRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debug-develRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debuginfoRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-develRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-docRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-firmwareRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-headersRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
perfRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
perf-debuginfoRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
python-perf-debuginfoRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernelRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-abi-whitelistsRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debugRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debug-debuginfoRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debug-develRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debuginfoRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-develRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-docRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-firmwareRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernel-headersRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
perfRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
perf-debuginfoRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
python-perf-debuginfoRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
python-perfRed Hat:rhel_aus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
python-perfRed Hat:rhel_tus:6.6::server From an advisory covering 3 CVEs |
before 0:2.6.32-504.72.4.el6 | 0:2.6.32-504.72.4.el6 |
kernelRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-abi-whitelistsRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-debugRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-debug-debuginfoRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-debug-develRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-debuginfoRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-develRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-docRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-firmwareRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernel-headersRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
perfRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
perf-debuginfoRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
python-perf-debuginfoRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
python-perfRed Hat:rhel_aus:6.5::server From an advisory covering 3 CVEs |
before 0:2.6.32-431.91.3.el6 | 0:2.6.32-431.91.3.el6 |
kernelRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-debugRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-debug-debuginfoRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-debug-develRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-debuginfoRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-develRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-docRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-firmwareRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
kernel-headersRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
perfRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
perf-debuginfoRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
python-perf-debuginfoRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
python-perfRed Hat:rhel_aus:6.4::server From an advisory covering 4 CVEs |
before 0:2.6.32-358.91.4.el6 | 0:2.6.32-358.91.4.el6 |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-10901 is a high vulnerability (CVSS 7.8) in Linux Kernel, published July 26, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. No source names a fixed version.
References
securityfocus.com/bid/104905
access.redhat.com/errata/RHSA-2018:2393
access.redhat.com/errata/RHSA-2018:2390
access.redhat.com/errata/RHSA-2018:2391
access.redhat.com/errata/RHSA-2018:2392
access.redhat.com/errata/RHSA-2018:2394
Show 71 moreShow less
oracle.com/security-alerts/cpujul2020.html
oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=3444d7da1839b851eefedd372978d8a982316c36
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10901
nvd.nist.gov/vuln/detail/CVE-2018-10901
github.com/advisories/GHSA-8j5h-gvcc-pfhw
access.redhat.com/security/updates/classification
access.redhat.com/security/vulnerabilities/L1TF
bugzilla.redhat.com/show_bug.cgi?id=1501878
bugzilla.redhat.com/show_bug.cgi?id=1535315
bugzilla.redhat.com/show_bug.cgi?id=1550142
bugzilla.redhat.com/show_bug.cgi?id=1563994
bugzilla.redhat.com/show_bug.cgi?id=1581650
bugzilla.redhat.com/show_bug.cgi?id=1585005
bugzilla.redhat.com/show_bug.cgi?id=1601704
bugzilla.redhat.com/show_bug.cgi?id=1601849
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2390.json
access.redhat.com/security/cve/CVE-2017-0861
cve.org/CVERecord?id=CVE-2017-0861
nvd.nist.gov/vuln/detail/CVE-2017-0861
access.redhat.com/security/cve/CVE-2017-15265
cve.org/CVERecord?id=CVE-2017-15265
nvd.nist.gov/vuln/detail/CVE-2017-15265
access.redhat.com/security/cve/CVE-2018-3620
cve.org/CVERecord?id=CVE-2018-3620
nvd.nist.gov/vuln/detail/CVE-2018-3620
access.redhat.com/articles/3562741
foreshadowattack.eu
software.intel.com/security-software-guidance/software-guidance/l1-terminal-fault
redhat.com/en/blog/deeper-look-l1-terminal-fault-aka-foreshadow
redhat.com/en/blog/understanding-l1-terminal-fault-aka-foreshadow-what-you-need-know
access.redhat.com/security/cve/CVE-2018-3646
cve.org/CVERecord?id=CVE-2018-3646
nvd.nist.gov/vuln/detail/CVE-2018-3646
access.redhat.com/security/cve/CVE-2018-3693
cve.org/CVERecord?id=CVE-2018-3693
nvd.nist.gov/vuln/detail/CVE-2018-3693
01.org/security/advisories/intel-oss-10002
access.redhat.com/solutions/3523601
people.csail.mit.edu/vlk/spectre11.pdf
software.intel.com/sites/default/files/managed/4e/a1/337879-analyzing-potential-bounds-Check-bypass-vulnerabilities.pdf
access.redhat.com/security/cve/CVE-2018-5390
cve.org/CVERecord?id=CVE-2018-5390
nvd.nist.gov/vuln/detail/CVE-2018-5390
access.redhat.com/articles/3553061
kb.cert.org/vuls/id/962459
spinics.net/lists/netdev/msg514742.html
access.redhat.com/security/cve/CVE-2018-7566
cve.org/CVERecord?id=CVE-2018-7566
nvd.nist.gov/vuln/detail/CVE-2018-7566
access.redhat.com/security/cve/CVE-2018-10901
cve.org/CVERecord?id=CVE-2018-10901
access.redhat.com/security/cve/CVE-2018-1000004
cve.org/CVERecord?id=CVE-2018-1000004
nvd.nist.gov/vuln/detail/CVE-2018-1000004
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2391.json
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2392.json
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2393.json
access.redhat.com/security/vulnerabilities/ssbd
bugzilla.redhat.com/show_bug.cgi?id=1566890
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2394.json
access.redhat.com/security/cve/CVE-2018-3639
cve.org/CVERecord?id=CVE-2018-3639
nvd.nist.gov/vuln/detail/CVE-2018-3639
bugs.chromium.org/p/project-zero/issues/detail?id=1528
software.intel.com/sites/default/files/managed/b9/f9/336983-Intel-Analysis-of-Speculative-Execution-Side-Channels-White-Paper.pdf
software.intel.com/sites/default/files/managed/c5/63/336996-Speculative-Execution-Side-Channel-Mitigations.pdf
intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
ubuntu.com/security/CVE-2018-10901
git.kernel.org/linus/3444d7da1839b851eefedd372978d8a982316c36