VDB

CVE-2017-2583

CVE-2017-2583 PUBLISHED

The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application.

EPSS 0.08% · 23.5th percentile

Risk Scores

EPSS Score
0.08%
23.5th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSlinux-raspi25.3.0-1014.16, 5.3.0-1015.17, 5.4.0-1006.6
Ubuntu:20.04:LTSlinux-azure-fde5.4.0-1078.81+cvm1.1, *, 5.4.0-1076.79+cvm1.1
Ubuntu:16.04:LTSlinux-snapdragon4.4.0-1035.39, 4.4.0-1013.15, 4.4.0-1012.12
Ubuntu:24.04:LTSlinux-raspi-realtime6.8.0-2019.20, 0
Ubuntu:14.04:LTSlinux-lts-xenial4.4.0-14.30~14.04.2, 4.4.0-15.31~14.04.1, 4.4.0-18.34~14.04.1
Ubuntu:16.04:LTSlinux-raspi24.4.0-1004.5, 4.2.0-1014.21, 4.4.0-1029.36
Ubuntu:22.04:LTSlinux-realtime5.15.0-1032.35, 0
Ubuntu:20.04:LTSlinux-gke5.4.0-1078.84, 5.4.0-1080.86, 5.4.0-1081.87
Ubuntu:20.04:LTSlinux-riscv5.4.0-40.45, 5.4.0-39.44, 5.4.0-37.42
Ubuntu:16.04:LTSlinux-hwe4.10.0-30.34~16.04.1, 0, 4.8.0-36.36~16.04.1
Ubuntu:16.04:LTSlinux4.4.0-42.62, 4.4.0-38.57, 4.4.0-22.40
Ubuntu:14.04:LTSlinux3.13.0-49.81, 3.13.0-40.69, 3.13.0-48.80
Ubuntu:22.04:LTSlinux-riscv5.15.0-1022.26, 5.15.0-1027.31, 5.15.0-1028.32
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75, 0
Ubuntu:16.04:LTSlinux-aws0, 4.4.0-1001.10

Timeline

  • Feb 6, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 22, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Oct 25, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 27, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 5, 2022 EPSS Score
  • Jan 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›