← Back

CVE-2022-2196

nvd nist
Published: Jan 9, 2023Modified: Aug 7, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.0 / Impact: 6.0
Source: NVD

Description

A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).

Affected (6)

Linux
1 product
Linux Kernel
Debian
1 product
Debian Linux
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 5.11 to 5.15.96
Linux Kernel
From 5.16 to 6.1.14
Linux Kernel
From 5.4.47 to 5.4.233
Linux Kernel
From 5.6.19 to 5.7
Linux Kernel
From 5.7.3 to 5.10.170
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 10.0

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (11)

Source: cve-coordination@google.com
Source: cve-coordination@google.com
Source: cve-coordination@google.com
Source: cve-coordination@google.com
Source: cve-coordination@google.com
Mailing ListPatchVendor Advisory
Source: cve-coordination@google.com
PatchThird Party Advisory
Source: cve-coordination@google.com
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.