A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1263.json"
[
{
"id": "CVE-2022-1263-a50c09e5",
"target": {
"file": "virt/kvm/kvm_main.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa6c4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"63576216823795686201151139978163102753",
"290393549997474883304047313605210535983",
"196211528893455829345470730213509464393",
"87485303546277371560945813498749108471",
"124058985932258676746208023286689778433"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2022-1263-c4044a29",
"target": {
"function": "kvm_vcpu_destroy",
"file": "virt/kvm/kvm_main.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa6c4",
"digest": {
"function_hash": "270974885668887457538127732411651716852",
"length": 231.0
},
"signature_type": "Function"
}
]