CVE-2022-2153

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the Linux kernel's KVM allows a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This issue enables an unprivileged local attacker on the host to issue specific ioctl calls, resulting in a kernel oops condition that causes a denial of service. The vulnerability is related to errors in pointer dereferencing in the kvm irq delivery to apic fast() function of the Kernel-based Virtual Machine (KVM) subsystem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.