CVE-2022-39189

An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2022-09-02

Last modified

2025-05-05

Affected products

• Linux Kernel (Linux)
• Hci Baseboard Management Controller (Netapp)

References

• https://bugs.chromium.org/p/project-zero/issues/detail?id=2309
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.17
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6cd88243c7e03845a450795e134b488fc2afb736
• https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736
• https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
• https://security.netapp.com/advisory/ntap-20230214-0007/
• https://www.debian.org/security/2023/dsa-5480