PT-2022-6439

CVE-2022-3344

·

Published

2022-10-24

·

Updated

2026-10-19

Description by

CVSS 4.0
9.4
Critical
MetricsAV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions KVM (affected versions not specified)
Description A flaw was found in KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0). The issue is related to the incorrect handling of nested shutdown execution. Exploitation of the issue may allow an attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2022-2924
ALT-PU-2022-2925
ALT-PU-2022-3364
ALT-PU-2022-3371
ALT-PU-2023-1684
ALT-PU-2023-1741
ALT-PU-2023-1814
ALT-PU-2023-4894
AZL-11352
CLSA-2026-1786761805
MGASA-2022-0477
MGASA-2022-0478
OPENSUSE-SU-2023_0146-1
OPENSUSE-SU-2023_0147-1
OPENSUSE-SU-2023_0149-1
SUSE-SU-2023:0146-1
SUSE-SU-2023:0147-1
SUSE-SU-2023:0149-1
USN-5911-1
USN-5912-1
USN-5929-1
USN-5935-1
USN-5938-1
USN-5941-1
USN-5950-1
USN-5962-1
Found an issue in the description? Have something to add? Feel free to write us 👾