CVE-2022-49774: KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/xen: Fix eventfd error handling in kvmxeneventfdassign()
Should not call eventfdctxput() in case of error.
[Introduce new goto target instead. - Paolo]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.0.10-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.0.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49774?
CVE-2022-49774 has been classified as a medium severity vulnerability.
How do I fix CVE-2022-49774?
To fix CVE-2022-49774, you should upgrade to the patched version of the Linux kernel that addresses this issue.
What systems are affected by CVE-2022-49774?
CVE-2022-49774 affects various versions of the Linux kernel that utilize KVM with x86/xen.
What are the potential impacts of CVE-2022-49774?
CVE-2022-49774 may lead to improper error handling in the eventfd system, potentially affecting the reliability of KVM functions.
Who fixed CVE-2022-49774?
CVE-2022-49774 was addressed by a security patch introduced by the Linux kernel development team.