High severity8.8NVD Advisory· Published Jan 3, 2019· Updated Jun 17, 2026
CVE-2018-16882
CVE-2018-16882
Description
A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled. In nested_get_vmcs12_pages(), in case of an error while processing posted interrupt address, it unmaps the 'pi_desc_page' without resetting 'pi_desc' descriptor address, which is later used in pi_test_and_clear_on(). A guest user/process could use this flaw to crash the host kernel resulting in DoS or potentially gain privileged access to a system. Kernel versions before 4.14.91 and before 4.19.13 are vulnerable.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29- osv-coords27 versionspkg:rpm/suse/kernel-default&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP3pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/kernel-source&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/kernel-syms&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/kgraft-patch-SLE12-SP3_Update_41&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/kgraft-patch-SLE12-SP3_Update_41&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/kgraft-patch-SLE12-SP3_Update_41&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/kgraft-patch-SLE12-SP3_Update_41&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/kgraft-patch-SLE12-SP3_Update_41&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208
< 4.4.180-94.150.1+ 26 more
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.121-92.161.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.121-92.161.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.121-92.161.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 4.4.180-94.150.1
- (no CPE)range: < 1-4.3.1
- (no CPE)range: < 1-4.3.1
- (no CPE)range: < 1-4.3.1
- (no CPE)range: < 1-4.3.1
- (no CPE)range: < 1-4.3.1
Patches
Vulnerability mechanics
References
13- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- marc.infonvdPatchThird Party Advisory
- www.securityfocus.com/bid/106254nvdThird Party AdvisoryVDB Entry
- lwn.net/Articles/775720/nvdThird Party Advisory
- lwn.net/Articles/775721/nvdThird Party Advisory
- support.f5.com/csp/article/K80557033nvdThird Party Advisory
- usn.ubuntu.com/3871-1/nvdThird Party Advisory
- usn.ubuntu.com/3871-3/nvdThird Party Advisory
- usn.ubuntu.com/3871-4/nvdThird Party Advisory
- usn.ubuntu.com/3871-5/nvdThird Party Advisory
- usn.ubuntu.com/3872-1/nvdThird Party Advisory
- usn.ubuntu.com/3878-1/nvdThird Party Advisory
- usn.ubuntu.com/3878-2/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.