High severity7.8NVD Advisory· Published Jul 28, 2018· Updated Jun 17, 2026
CVE-2018-14678
CVE-2018-14678
Description
An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
27- osv-coords25 versionspkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP2pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_25&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_25&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_25&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_25&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/lttng-modules&distro=SUSE%20Enterprise%20Storage%204pkg:rpm/suse/lttng-modules&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/lttng-modules&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/lttng-modules&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/lttng-modules&distro=SUSE%20OpenStack%20Cloud%207
< 4.4.121-92.95.1+ 24 more
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 4.4.121-92.95.1
- (no CPE)range: < 1-3.4.1
- (no CPE)range: < 1-3.4.1
- (no CPE)range: < 1-3.4.1
- (no CPE)range: < 1-3.4.1
- (no CPE)range: < 2.7.1-9.6.1
- (no CPE)range: < 2.7.1-9.6.1
- (no CPE)range: < 2.7.1-9.6.1
- (no CPE)range: < 2.7.1-9.6.1
- (no CPE)range: < 2.7.1-9.6.1
Patches
Vulnerability mechanics
References
7- xenbits.xen.org/xsa/advisory-274.htmlnvdMitigationPatchVendor Advisory
- www.securityfocus.com/bid/104924nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041397nvdThird Party AdvisoryVDB Entry
- lists.debian.org/debian-lts-announce/2018/10/msg00003.htmlnvdMailing ListThird Party Advisory
- usn.ubuntu.com/3931-1/nvdThird Party Advisory
- usn.ubuntu.com/3931-2/nvdThird Party Advisory
- www.debian.org/security/2018/dsa-4308nvdThird Party Advisory
News mentions
0No linked articles in our index yet.