cve/2022/CVE-2022-2153.md

CVE-2022-2153

Description

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

POC

Reference

• https://www.openwall.com/lists/oss-security/2022/06/22/1

Github

• https://github.com/ARPSyndicate/cvemon