An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVMVCPUPREEMPTED situations.
[
{
"events": [
{
"introduced": "4.16"
},
{
"fixed": "5.4.244"
}
]
},
{
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.180"
}
]
},
{
"events": [
{
"introduced": "5.11"
},
{
"fixed": "5.15.60"
}
]
},
{
"events": [
{
"introduced": "5.16"
},
{
"fixed": "5.18.17"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "h300s"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "h410c"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "h410s"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "h500s"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "h700s"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.18.17"
}
]
}
]
[
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "arch/x86/kvm/vmx/vmx.c"
},
"id": "CVE-2022-39189-28ee38d3",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"digest": {
"line_hashes": [
"59692480275264766853165137104156426228",
"214353513911615457213562912492860417937",
"273877541879068920260347504933113745277",
"15798145667535997922991764239401250078"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "arch/x86/kvm/vmx/vmx.c",
"function": "handle_external_interrupt_irqoff"
},
"id": "CVE-2022-39189-726bef0c",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"digest": {
"function_hash": "165481017018219247378593075874815406330",
"length": 333.0
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "arch/x86/kvm/x86.c"
},
"id": "CVE-2022-39189-bf879999",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"digest": {
"line_hashes": [
"77013427174380958763618251436307309217",
"260912490785269495300238009067040999760",
"27048756297649844329325457963885708573",
"214724014562384713343912824674964654335",
"305645830347182943102607156739301999758",
"195355178703760701337862641816984625414",
"302809168331074603663963560945904877504",
"168315357588411982645442099633371135259",
"157114436468270750078279160245739976388",
"280460129927042103704893367658740007798",
"195828335554372007478403600861262374234"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "arch/x86/include/asm/kvm_host.h"
},
"id": "CVE-2022-39189-ce0962c2",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"digest": {
"line_hashes": [
"27455215021659110276612552094316477814",
"32679905025671916597419488091600971837",
"261160318527586754838829020256618233405",
"314170642073886540107025660770024421717",
"337327902055208212947137973516695178292",
"250204395601394085695912527180843271660",
"177798265508470921274907416937320593741",
"146010721565448674377621111995655250043"
],
"threshold": 0.9
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "arch/x86/kvm/svm/svm.c"
},
"id": "CVE-2022-39189-d553c619",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"digest": {
"line_hashes": [
"319180214301471377585150049024309308330",
"50373122713968120405096298349158498297",
"262696856476674390061976107357942042546",
"335269534060379695117872965537878128774"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "arch/x86/kvm/x86.c",
"function": "kvm_steal_time_set_preempted"
},
"id": "CVE-2022-39189-f4a7bcf0",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"digest": {
"function_hash": "38604489406231837717793669152131606938",
"length": 755.0
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"target": {
"file": "arch/x86/kvm/x86.c",
"function": "vcpu_run"
},
"id": "CVE-2022-39189-f8aff16c",
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"digest": {
"function_hash": "78781374950285328595106770956032560160",
"length": 657.0
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39189.json"