High 7.8Published May 8, 2018

CVE-2018-8897A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, result…

Updated under an hour ago (Nov 2, 2026, 12:10 AM ET)

Does this affect you?

It affects debian_linux and 10 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for debian_linux Exploited in the last 30 days

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL < 3, the debug exception is delivered after the transfer to CPL < 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs.

CVSS: 7.8 HIGH (v3.0, NVD)CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-362
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 16, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

debian debian_linux debian:debian_linux	7.0; 8.0; 9.0	NVD
canonical ubuntu_linux canonical:ubuntu_linux	14.04; 16.04; 17.10	NVD
redhat enterprise_linux_server redhat:enterprise_linux_server	7.0	NVD
redhat enterprise_linux_workstation redhat:enterprise_linux_workstation	7.0	NVD
redhat enterprise_virtualization_manager redhat:enterprise_virtualization_manager	3.0	NVD
citrix xenserver citrix:xenserver	6.0.2; 6.2.0; 6.5; 7.0; 7.1; 7.2; 7.3; 7.4	NVD
synology skynas synology:skynas	all versions	NVD
synology diskstation_manager synology:diskstation_manager	5.2; 6.0; 6.1	NVD
apple mac_os_x apple:mac_os_x	before 10.13.4	NVD
xen xen xen:xen	all versions	NVD
1–10 of 11

References

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9	patch, third-party-advisory
http://openwall.com/lists/oss-security/2018/05/08/1	mailing-list, third-party-advisory
http://openwall.com/lists/oss-security/2018/05/08/4	mailing-list, third-party-advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190921-01-debug-en
http://www.securityfocus.com/bid/104071	third-party-advisory, vdb-entry
http://www.securitytracker.com/id/1040744	third-party-advisory, vdb-entry
http://www.securitytracker.com/id/1040849	third-party-advisory, vdb-entry
http://www.securitytracker.com/id/1040861	third-party-advisory, vdb-entry
http://www.securitytracker.com/id/1040866	third-party-advisory, vdb-entry
http://www.securitytracker.com/id/1040882	third-party-advisory, vdb-entry
1–10 of 25

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.