CVE-2022-1263

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to the fixed version

Description The issue is related to a NULL pointer dereference in the KVM subsystem of the Linux kernel, specifically in the kvm dirty ring push function. This flaw can be exploited by an unprivileged local attacker on the host to cause a denial of service by issuing specific ioctl calls, resulting in a kernel oops condition.

Recommendations For Linux Kernel versions prior to the fixed version, consider disabling the dirty ring support as a temporary workaround until a patch is available. Restrict access to the vulnerable kvm dirty ring push function to minimize the risk of exploitation. Avoid using specific ioctl calls that can cause a kernel oops condition until the issue is resolved.