CVE-2022-48764

🗓️ 20 Jun 2024 00:00:00Reported by ubuntu.comType

ubuntucve

ubuntucve🔗 ubuntu.com👁 18 Views

CVE-2022-48764 resolved, free kvm_cpuid_entry2 array on successful post-KVM_RUN KVM_SET_CPUID{,2} to fix memory leak

Reporter	Title	Published	Views	Family All 17
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the kvm_set_cpuid function in the include/linux/slab.h library of the KVM virtualization subsystem in the Linux operating system allows a hacker to induce a service failure.	16 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvm_set_cpuid() function in the arch/x86/kvm/cpuid.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	25 Mar 202500:00	–	bdu_fstec
CNNVD	Linux kernel security vulnerabilities	20 Jun 202400:00	–	cnnvd
CVE	CVE-2022-48764	20 Jun 202411:13	–	cve
Cvelist	CVE-2022-48764 KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}	20 Jun 202411:13	–	cvelist
Debian CVE	CVE-2022-48764	20 Jun 202411:13	–	debiancve
NVD	CVE-2022-48764	20 Jun 202412:15	–	nvd
OSV	CVE-2022-48764 KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}	20 Jun 202411:13	–	osv
OSV	DEBIAN-CVE-2022-48764	20 Jun 202412:15	–	osv

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/linus/811f95ff95270e6048197821434d9301e3d7f07c%20(5.17-rc2)
git	www.git.kernel.org/stable/c/b9ee734a14bb685b2088f2176d82b34cb4e30dbc
git	www.git.kernel.org/stable/c/811f95ff95270e6048197821434d9301e3d7f07c

04 Aug 2025 19:40Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3

EPSS0.00179

SSVC

linux kernel kvm memory leak vulnerability x86 post-kvm_run kvm_set_cpuid 2 memory leak fix array free resolved