CVE-2022-1852: Null Pointer Dereference
A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86emulateinsn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU.
Other sources
When we execute an illegal instruction in guest in Intel CPU, such as invlpga(an AMD instruction), which will cause an exception nmi VM-exit. KVM will call handleexceptionnmi to deal with it. Then handleexceptionnmi will call handleud to emulate the undefined instruction. Finally, it will call x86decodeinsn. In x86decodeinsn function, CheckPerm will be set into ctxt->d and ctxt->checkperm will be set to NULL due to the check permition callback function of illegal instruction is not exists.
— Red Hat
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-1852?
CVE-2022-1852 has a severity rating that indicates it can lead to a denial of service condition in certain Linux kernel versions.
How do I fix CVE-2022-1852?
To fix CVE-2022-1852, update to the patched kernel versions specified by the relevant Linux distribution, such as Red Hat or Debian.
Which Linux distributions are affected by CVE-2022-1852?
CVE-2022-1852 affects various versions of the Linux kernel across Red Hat and Debian distributions.
What component of the system is affected by CVE-2022-1852?
CVE-2022-1852 specifically affects the KVM module of the Linux kernel's x86 architecture.
Can CVE-2022-1852 be exploited remotely?
Exploitation of CVE-2022-1852 typically requires access to the affected system, making it less likely to be exploited remotely.