CVE-2022-2153: falha em kernel
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.5%
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
Produtos afetados
n/a · kernelReferências
https://bugzilla.redhat.com/show_bug.cgi?id=2069736https://cert-portal.siemens.com/productcert/html/ssa-794697.htmlhttps://github.com/torvalds/linux/commit/00b5f37189d24ac3ed46cb7f11742094778c46cehttps://github.com/torvalds/linux/commit/7ec37d1cbe17d8189d9562178d8b29167fe1c31ahttps://github.com/torvalds/linux/commit/b1e34d325397a33d97d845e312d7cf2a8b646b44https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlhttps://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlhttps://www.openwall.com/lists/oss-security/2022/06/22/1