TTCSIRT-151.080218: TT-CSIRT Advisory – Linux Security Updates

TTCSIRT-151.080218: TT-CSIRT Advisory – Linux Security Updates

Kernel.org has released a security update stating that a vulnerability in the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux Kernel exists due to the vmx.c source code file failing to set the GDT.LIMIT value to the previous host. As a result, malicious entries could be placed in the Global Descriptor Table (GDT) on an affected system.

An attacker could exploit this vulnerability by submitting a request with malicious input to the targeted system thereby gaining elevated privileges.