CVE - CVE-2022-49568

CVE-ID
CVE-2022-49568	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: Don't null dereference ops->destroy A KVM device cleanup happens in either of two callbacks: 1) destroy() which is called when the VM is being destroyed; 2) release() which is called when a device fd is closed. Most KVM devices use 1) but Book3s's interrupt controller KVM devices (XICS, XIVE, XIVE-native) use 2) as they need to close and reopen during the machine execution. The error handling in kvm_ioctl_create_device() assumes destroy() is always defined which leads to NULL dereference as discovered by Syzkaller. This adds a checks for destroy!=NULL and adds a missing release(). This is not changing kvm_destroy_devices() as devices with defined release() should have been removed from the KVM devices list by then.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/170465715a60cbb7876e6b961b21bd3225469da8 URL:https://git.kernel.org/stable/c/170465715a60cbb7876e6b961b21bd3225469da8 MISC:https://git.kernel.org/stable/c/3616776bc51cd3262bb1be60cc01c72e0a1959cf URL:https://git.kernel.org/stable/c/3616776bc51cd3262bb1be60cc01c72e0a1959cf MISC:https://git.kernel.org/stable/c/d4a5a79b780891c5cbdfdc6124d46fdf8d13dba1 URL:https://git.kernel.org/stable/c/d4a5a79b780891c5cbdfdc6124d46fdf8d13dba1 MISC:https://git.kernel.org/stable/c/e8bc2427018826e02add7b0ed0fc625a60390ae5 URL:https://git.kernel.org/stable/c/e8bc2427018826e02add7b0ed0fc625a60390ae5 MISC:https://git.kernel.org/stable/c/e91665fbbf3ccb268b268a7d71a6513538d813ac URL:https://git.kernel.org/stable/c/e91665fbbf3ccb268b268a7d71a6513538d813ac
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)