CVE-2022-49883: KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format
On 64 bit host, if the guest doesn't have X86FEATURELM, KVM will access 16 gprs to 32-bit smram image, causing out-ouf-bound ram access.
On 32 bit host, the rsmloadstate64/entersmmsavestate64 is compiled out, thus access overflow can't happen.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49883?
CVE-2022-49883 has been classified with a high severity level due to its potential to cause out-of-bounds memory access.
What is the impact of CVE-2022-49883?
CVE-2022-49883 can lead to unauthorized access to memory regions, potentially allowing for privilege escalation or system instability.
How do I fix CVE-2022-49883?
To fix CVE-2022-49883, update your Linux kernel to the latest stable version that includes the security patch.
Who is affected by CVE-2022-49883?
CVE-2022-49883 affects Linux kernel users running KVM with 32-bit SMRAM images on 64-bit hosts without X86_FEATURE_LM.
When was CVE-2022-49883 disclosed?
CVE-2022-49883 was disclosed as part of the Linux kernel security updates addressing vulnerabilities in the KVM module.