An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVMVCPUPREEMPTED situations.
[
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-14a2a309",
"target": {
"file": "arch/x86/include/asm/kvm_host.h"
},
"digest": {
"line_hashes": [
"27455215021659110276612552094316477814",
"32679905025671916597419488091600971837",
"261160318527586754838829020256618233405",
"314170642073886540107025660770024421717",
"337327902055208212947137973516695178292",
"250204395601394085695912527180843271660",
"177798265508470921274907416937320593741",
"146010721565448674377621111995655250043"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-1d3e62fe",
"target": {
"file": "arch/x86/kvm/vmx/vmx.c",
"function": "handle_external_interrupt_irqoff"
},
"digest": {
"function_hash": "165481017018219247378593075874815406330",
"length": 333.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-32284b9c",
"target": {
"file": "arch/x86/kvm/x86.c",
"function": "vcpu_run"
},
"digest": {
"function_hash": "78781374950285328595106770956032560160",
"length": 657.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-4b40c4be",
"target": {
"file": "arch/x86/kvm/svm/svm.c"
},
"digest": {
"line_hashes": [
"319180214301471377585150049024309308330",
"50373122713968120405096298349158498297",
"262696856476674390061976107357942042546",
"335269534060379695117872965537878128774"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-70587a41",
"target": {
"file": "arch/x86/kvm/vmx/vmx.c"
},
"digest": {
"line_hashes": [
"59692480275264766853165137104156426228",
"214353513911615457213562912492860417937",
"273877541879068920260347504933113745277",
"15798145667535997922991764239401250078"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-d39f3b37",
"target": {
"file": "arch/x86/kvm/x86.c",
"function": "kvm_steal_time_set_preempted"
},
"digest": {
"function_hash": "38604489406231837717793669152131606938",
"length": 755.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-f427944c",
"target": {
"file": "arch/x86/kvm/x86.c"
},
"digest": {
"line_hashes": [
"77013427174380958763618251436307309217",
"260912490785269495300238009067040999760",
"27048756297649844329325457963885708573",
"214724014562384713343912824674964654335",
"305645830347182943102607156739301999758",
"195355178703760701337862641816984625414",
"302809168331074603663963560945904877504",
"168315357588411982645442099633371135259",
"157114436468270750078279160245739976388",
"280460129927042103704893367658740007798",
"195828335554372007478403600861262374234"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39189.json"
[
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-28ee38d3",
"target": {
"file": "arch/x86/kvm/vmx/vmx.c"
},
"digest": {
"line_hashes": [
"59692480275264766853165137104156426228",
"214353513911615457213562912492860417937",
"273877541879068920260347504933113745277",
"15798145667535997922991764239401250078"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-726bef0c",
"target": {
"file": "arch/x86/kvm/vmx/vmx.c",
"function": "handle_external_interrupt_irqoff"
},
"digest": {
"function_hash": "165481017018219247378593075874815406330",
"length": 333.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-bf879999",
"target": {
"file": "arch/x86/kvm/x86.c"
},
"digest": {
"line_hashes": [
"77013427174380958763618251436307309217",
"260912490785269495300238009067040999760",
"27048756297649844329325457963885708573",
"214724014562384713343912824674964654335",
"305645830347182943102607156739301999758",
"195355178703760701337862641816984625414",
"302809168331074603663963560945904877504",
"168315357588411982645442099633371135259",
"157114436468270750078279160245739976388",
"280460129927042103704893367658740007798",
"195828335554372007478403600861262374234"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-ce0962c2",
"target": {
"file": "arch/x86/include/asm/kvm_host.h"
},
"digest": {
"line_hashes": [
"27455215021659110276612552094316477814",
"32679905025671916597419488091600971837",
"261160318527586754838829020256618233405",
"314170642073886540107025660770024421717",
"337327902055208212947137973516695178292",
"250204395601394085695912527180843271660",
"177798265508470921274907416937320593741",
"146010721565448674377621111995655250043"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-d553c619",
"target": {
"file": "arch/x86/kvm/svm/svm.c"
},
"digest": {
"line_hashes": [
"319180214301471377585150049024309308330",
"50373122713968120405096298349158498297",
"262696856476674390061976107357942042546",
"335269534060379695117872965537878128774"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-f4a7bcf0",
"target": {
"file": "arch/x86/kvm/x86.c",
"function": "kvm_steal_time_set_preempted"
},
"digest": {
"function_hash": "38604489406231837717793669152131606938",
"length": 755.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/6cd88243c7e03845a450795e134b488fc2afb736",
"id": "CVE-2022-39189-f8aff16c",
"target": {
"file": "arch/x86/kvm/x86.c",
"function": "vcpu_run"
},
"digest": {
"function_hash": "78781374950285328595106770956032560160",
"length": 657.0
},
"signature_type": "Function",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39189.json"