CVE ID:	CVE-2018-1087
Description:	kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.
Test IDs:	1.3.6.1.4.1.25623.1.0.882900   1.3.6.1.4.1.25623.1.1.2.2018.1264   1.3.6.1.4.1.25623.1.0.704196
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1087 BugTraq ID: 104127 http://www.securityfocus.com/bid/104127 Debian Security Information: DSA-4196 (Google Search) https://www.debian.org/security/2018/dsa-4196 http://www.openwall.com/lists/oss-security/2018/05/08/5 https://access.redhat.com/security/vulnerabilities/pop_ss RedHat Security Advisories: RHSA-2018:1318 https://access.redhat.com/errata/RHSA-2018:1318 RedHat Security Advisories: RHSA-2018:1345 https://access.redhat.com/errata/RHSA-2018:1345 RedHat Security Advisories: RHSA-2018:1347 https://access.redhat.com/errata/RHSA-2018:1347 RedHat Security Advisories: RHSA-2018:1348 https://access.redhat.com/errata/RHSA-2018:1348 RedHat Security Advisories: RHSA-2018:1355 https://access.redhat.com/errata/RHSA-2018:1355 RedHat Security Advisories: RHSA-2018:1524 https://access.redhat.com/errata/RHSA-2018:1524 http://www.securitytracker.com/id/1040862 https://usn.ubuntu.com/3641-1/ https://usn.ubuntu.com/3641-2/