Lucene search

K

RedhatCVELIST:CVE-2022-1789

HistoryMay 31, 2022 - 6:48 p.m.

CVE-2022-1789

2022-05-3118:48:00

CWE-476

redhat

www.cve.org

2

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%

With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "no patch information available yet"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1832397

francozappa.github.io/about-bias/

kb.cert.org/vuls/id/647177/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6JP355XFVAB33X4BNO3ERVTURFYEDB7/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBUOQTNTQ4ZCXHOCNKYIL2ZUIAZ675RD/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KCEAPIVPRTJHKPF2A2HVF5XHD5XJT3MN/

www.debian.org/security/2022/dsa-5161

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%

Related for CVELIST:CVE-2022-1789

openvas22 cve1 fedora3 prion1 redhatcve1 cnvd1 ubuntucve1 debiancve1 veracode1 nvd1 photon4 mageia2 altlinux1 nessus36 osv10 ubuntu5 debian1 almalinux4 oraclelinux2 redhat7 suse2 slackware1 ibm1