CVE-2018-14678
Fixed in a distro release EPSS <1%
An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges.
Products: linux_kernel, xen, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.17.14-1 |
| Debian 13 | linux | 4.17.14-1 |
| Debian 14 | linux | 4.17.14-1 |
| Debian 8 | linux | 3.16.59-1 |
| Debian 8 | linux-4.9 | 4.9.110-3+deb9u5~deb8u1 |
| Debian 9 | linux | 4.9.110-3+deb9u5 |
| SUSE Enterprise Storage 4 | kernel-default | 4.4.121-92.95.1 |
| SUSE Enterprise Storage 4 | kernel-source | 4.4.121-92.95.1 |
| SUSE Enterprise Storage 4 | kernel-syms | 4.4.121-92.95.1 |
| SUSE Enterprise Storage 4 | kgraft-patch-SLE12-SP2_Update_25 | 1-3.4.1 |
| SUSE Enterprise Storage 4 | lttng-modules | 2.7.1-9.6.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP2 | kernel-default | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-default | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-source | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | kernel-syms | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | lttng-modules | 2.7.1-9.6.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-default | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-source | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-syms | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | kgraft-patch-SLE12-SP2_Update_25 | 1-3.4.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | lttng-modules | 2.7.1-9.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-default | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-source | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-syms | 4.4.121-92.95.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kgraft-patch-SLE12-SP2_Update_25 | 1-3.4.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | lttng-modules | 2.7.1-9.6.1 |
| SUSE OpenStack Cloud 7 | kernel-default | 4.4.121-92.95.1 |
| SUSE OpenStack Cloud 7 | kernel-source | 4.4.121-92.95.1 |
| SUSE OpenStack Cloud 7 | kernel-syms | 4.4.121-92.95.1 |
| SUSE OpenStack Cloud 7 | kgraft-patch-SLE12-SP2_Update_25 | 1-3.4.1 |
| SUSE OpenStack Cloud 7 | lttng-modules | 2.7.1-9.6.1 |
| Ubuntu 14.04 LTS | linux-azure | 4.15.0-1041.45~14.04.1 |
| Ubuntu 16.04 LTS | linux-aws-hwe | 4.15.0-1035.37~16.04.1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1041.45 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1029.31~16.04.1 |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-47.50~16.04.1 |
| Ubuntu 16.04 LTS | linux-oracle | 4.15.0-1010.12~16.04.1 |
| Ubuntu 18.04 LTS | linux | 4.15.0-47.50 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1035.37 |
| Ubuntu 18.04 LTS | linux-azure | 4.18.0-1011.11~18.04.1 |
| Ubuntu 18.04 LTS | linux-gcp | 4.15.0-1029.31 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1031.31 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1035.40 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1010.12 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1033.35 |