CVE - CVE-2022-2153

CVE-ID
CVE-2022-2153	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://bugzilla.redhat.com/show_bug.cgi?id=2069736 URL:https://bugzilla.redhat.com/show_bug.cgi?id=2069736 MISC:https://github.com/torvalds/linux/commit/00b5f37189d24ac3ed46cb7f11742094778c46ce URL:https://github.com/torvalds/linux/commit/00b5f37189d24ac3ed46cb7f11742094778c46ce MISC:https://github.com/torvalds/linux/commit/7ec37d1cbe17d8189d9562178d8b29167fe1c31a URL:https://github.com/torvalds/linux/commit/7ec37d1cbe17d8189d9562178d8b29167fe1c31a MISC:https://github.com/torvalds/linux/commit/b1e34d325397a33d97d845e312d7cf2a8b646b44 URL:https://github.com/torvalds/linux/commit/b1e34d325397a33d97d845e312d7cf2a8b646b44 MISC:https://www.openwall.com/lists/oss-security/2022/06/22/1 URL:https://www.openwall.com/lists/oss-security/2022/06/22/1 MLIST:[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update URL:https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html MLIST:[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update URL:https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
Assigning CNA
Red Hat, Inc.
Date Record Created
20220621	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20220621)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)