cve/2022/CVE-2022-2153.md

### [CVE-2022-2153](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2153)
![](https://img.shields.io/static/v1?label=Product&message=kernel&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-476&color=brighgreen)

### Description

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

### POC

#### Reference
- https://www.openwall.com/lists/oss-security/2022/06/22/1

#### Github
- https://github.com/ARPSyndicate/cvemon