CVE-2022-3344 describes a flaw in the KVM's AMD nested virtualization (SVM) affecting the Linux kernel. A malicious L1 guest can trigger a kernel panic and page fault on the host (L0) by intentionally failing to intercept the shutdown of a nested L2 guest. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, leading to high availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.0.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
kernel: KVM: SVM: nested shutdown interception could lead to host crash
Oct 20, 2022A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2) possibly leading to a page fault and kernel panic in the host (L0).
Oct 11, 2022