HIGH 7.8 Microsoft
CVE-2022-39189
An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.
Microsoft Security Update 2022-Sep: An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.
Affected Products
- cm1 kernel 5.10.181.1-1 on CBL Mariner 1.0
- cbl2 kernel 5.15.67.1-4 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-39189
- https://nvd.nist.gov/vuln/detail/CVE-2022-39189
This high severity vulnerability with a CVSS score of 7.8 was published on 2022-09-13 via Microsoft. Affected: cm1 kernel 5.10.181.1-1 on CBL Mariner 1.0, cbl2 kernel 5.15.67.1-4 on CBL Mariner 2.0.
vulnfeed aggregates 10939 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.