CVE-2022-39189
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-39189
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39189.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-39189
- Aliases
-
- A-245869446
- ASB-A-245869446
- Downstream
- Related
- Published
- 2022-09-02T05:15:07Z
- Modified
- 2025-08-09T19:01:26Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVMVCPUPREEMPTED situations.
- References
-
- https://bugs.chromium.org/p/project-zero/issues/detail?id=2309
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.17
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6cd88243c7e03845a450795e134b488fc2afb736
- https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736
- https://security.netapp.com/advisory/ntap-20230214-0007/
- https://www.debian.org/security/2023/dsa-5480
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html