CVE-2022-1789

Updated: 2023-03-10 12:28:07.061403

Description:

With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x MEDIUM 6.9
CVSS Version 3.x MEDIUM 6.8

Status

OS name Project name Version Score Severity Status Errata Last updated
CentOS 6 ELS kernel 2.6.32 6.8 MEDIUM Ignored 2022-06-11 11:38:27
CentOS 7 ELS kernel 3.10.0 6.8 MEDIUM Ignored 2023-09-19 09:29:59
CentOS 8.4 ELS kernel 4.18.0 6.8 MEDIUM Released CLSA-2023:1690287378 2023-07-25 09:18:57
CentOS 8.5 ELS kernel 4.18.0 6.8 MEDIUM Released CLSA-2023:1690294029 2023-07-25 11:14:46
CloudLinux 6 ELS kernel 2.6.32 6.8 MEDIUM Ignored 2022-06-11 11:38:27
Oracle Linux 6 ELS kernel 2.6.32 6.8 MEDIUM Ignored 2022-06-11 11:38:27
Ubuntu 16.04 ELS linux 4.4.0 6.8 MEDIUM Ignored 2022-06-11 11:38:27
Ubuntu 16.04 ELS linux-hwe 4.15.0 6.8 MEDIUM Ignored 2022-09-28 05:02:47
Ubuntu 18.04 ELS linux 4.15.0 6.8 MEDIUM Ignored 2023-03-02 04:04:16