2 matches found
CVE-2022-1789: NULL Pointer Dereference
With shadow paging enabled, the INVPCID instruction results in a call to kvmmmuinvpcidgva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference...
6.9CVSS6.5AI score0.0033EPSS
SaveExploits0References3
CVE-2022-1789
A flaw was found in KVM. With shadow paging enabled if INVPCID is executed with CR0.PG=0, the invlpg callback is not set, and the result is a NULL pointer dereference. This flaw allows a guest user to cause a kernel oops condition on the host, resulting in a denial of service. Mitigation Mitigati...
6.9CVSS6.7AI score0.0033EPSS
SaveExploits0References5
20