CVE-2022-2153 is a denial-of-service vulnerability in the Linux kernel's KVM component, specifically affecting Debian, Fedora, Linux, and Red Hat distributions. It allows an unprivileged local attacker on the host to trigger a kernel oops by issuing specific ioctl calls, stemming from a NULL pointer dereference when a misbehaving Virtual Machine Monitor (VMM) attempts to write to SYNIC/STIMER MSRs. Rated with a CVSS score of 5.5 (Medium), this flaw has a local attack vector and low attack complexity, leading to a high impact on availability but no impact on confidentiality or integrity. The vulnerability is not currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, nor is there any evidence of active exploitation. There are no known public exploits available in Metasploit, Nuclei, or ExploitDB, and the vulnerability has garnered minimal community discussion or media coverage, suggesting a low current threat landscape.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.18CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
36CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2022-2153
Sep 13, 2022A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls causing a kernel oops condition that results in a denial of service.
Aug 9, 2022kernel: KVM: NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
Mar 25, 2022