CVEvulnerability

CVE-2022-39189

7.8 HIGH Published 2022-09-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.

Affected configurations

• linux linux kernel (>= 4.16 < 5.4.244) • linux linux kernel (>= 5.5.0 < 5.10.180) • linux linux kernel (>= 5.11 < 5.15.60) • linux linux kernel (>= 5.16 < 5.18.17) • netapp hci baseboard management controller h300s • netapp hci baseboard management controller h410c • netapp hci baseboard management controller h410s • netapp hci baseboard management controller h500s • netapp hci baseboard management controller h700s

References