Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-7518

26
FAUCET Score

CVE-2017-7518 is a privilege escalation vulnerability in the Linux kernel's KVM module, affecting versions prior to 4.12, specifically impacting non-Linux guests. The flaw allows a low-privileged user within a guest VM to escalate their privileges by manipulating the trap flag during syscall emulation. With a CVSS score of 7.8 (High), this vulnerability has a local attack vector and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat level.

Impacted Technologies

VendorProductVersion(s)CPE
7.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
7.4CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
7.4CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.5MEDIUM

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
Exploitability Score
2.1
Impact Score
3.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
0.70%
Probability of exploitation in next 30 days
EPSS Percentile
49.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0070 is in the 86th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-693.21.1.rt56.639.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-693.21.1.el7
View patch

Vendor Advisories (1)

redhatCVE-2017-7518Moderate

Kernel: KVM: debug exception via syscall emulation

Jun 22, 2017

References

access.redhat.com / articles/3290921
Permissions RequiredThird Party Advisory
access.redhat.com / errata/RHSA-2018:0395
Third Party Advisory
access.redhat.com / errata/RHSA-2018:0412
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingPatchThird Party Advisory
usn.ubuntu.com / 3619-1
Third Party Advisory
usn.ubuntu.com / 3619-2
Third Party Advisory
usn.ubuntu.com / 3754-1
Third Party Advisory
debian.org / security/2017/dsa-3981
Third Party Advisory
spinics.net / lists/kvm/msg151817.html
Mailing ListPatch
openwall.com / lists/oss-security/2017/06/23/5
Mailing ListPatchThird Party Advisory
securityfocus.com / bid/99263
Third Party AdvisoryVDB Entry
securitytracker.com / id/1038782
Third Party AdvisoryVDB Entry