CVE-2022-3344

2022-10-2400:00:00

CWE-440

redhat

www.cve.org

kvm

amd

nested virtualization

malicious guest

kernel panic

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A flaw was found in the KVM’s AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0).

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linux kernel",
    "versions": [
      {
        "version": "Affected versions <= 6.0.3",
        "status": "affected"
      }
    ]
  }
]