CVE-2022-1789: Null Pointer Dereference
A flaw was found in KVM. With shadow paging enabled if INVPCID is executed with CR0.PG=0, the invlpg callback is not set, and the result is a NULL pointer dereference. This flaw allows a guest user to cause a kernel oops condition on the host, resulting in a denial of service.
Other sources
With shadow paging enabled, the INVPCID instruction results in a call to kvmmmuinvpcidgva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-1789?
CVE-2022-1789 is classified as a denial of service vulnerability due to a NULL pointer dereference that can cause a kernel oops condition.
How do I fix CVE-2022-1789?
To fix CVE-2022-1789, update the kernel to version 0:4.18.0-477.10.1.rt7.274.el8_8 or higher for Red Hat environments.
Which systems are affected by CVE-2022-1789?
CVE-2022-1789 affects various versions of the Linux kernel, including specific builds for Red Hat and Fedora.
What type of vulnerability is CVE-2022-1789?
CVE-2022-1789 is a flaw found in KVM (Kernel-based Virtual Machine) that can be exploited to cause denial of service.
Can guest users exploit CVE-2022-1789?
Yes, guest users can exploit CVE-2022-1789 to trigger a kernel oops condition on the host system.