CVE-2022-45869

2022-11-3000:00:00

ubuntu.com

cve-2022-45869

linux kernel

denial of service

nested virtualisation

tdp mmu

host os crash

memory corruption

unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

13.0%

JSON

A race condition in the x86 KVM subsystem in the Linux kernel through
6.1-rc6 allows guest OS users to cause a denial of service (host OS crash
or host OS memory corruption) when nested virtualisation and the TDP MMU
are enabled.

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchlinux< 5.15.0-67.74UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-35.36UNKNOWN
ubuntu23.04noarchlinux< 6.1.0-16.16UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1031.35UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1020.21UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1031.35~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1034.41UNKNOWN
ubuntu22.10noarchlinux-azure< 5.19.0-1021.22UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1034.41~20.04.1UNKNOWN
ubuntu22.04noarchlinux-azure-5.19< 5.19.0-1021.22~22.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	linux	< 5.15.0-67.74	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-35.36	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.1.0-16.16	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1031.35	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1020.21	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1031.35~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1034.41	UNKNOWN
ubuntu	22.10	noarch	linux-azure	< 5.19.0-1021.22	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1034.41~20.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-azure-5.19	< 5.19.0-1021.22~22.04.1	UNKNOWN