CVE-2022-39189

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.17

Description An issue in the x86 KVM subsystem of the Linux kernel allows unprivileged guest users to compromise the guest kernel due to mishandled TLB flush operations in certain KVM VCPU PREEMPTED situations. The vulnerability is related to incorrect handling of virtual processor state information. This could lead to local escalation of privilege with no additional execution privileges needed, and user interaction is not required for exploitation.

Recommendations For Linux kernel versions prior to 5.18.17, update to version 5.18.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the KVM subsystem to minimize the risk of exploitation.