SB2022101109 - Privilege escalation in Linux kernel x86 KVM subsystem

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022101109

SB2022101109 - Privilege escalation in Linux kernel x86 KVM subsystem

Published: October 11, 2022

Security Bulletin ID SB2022101109
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2022-39189)

The vulnerability allows a guest user to escalate privileges on the system.

The vulnerability exists due to incorrect handling of TLB flush operations in certain KVM_VCPU_PREEMPTED situations in the x86 KVM subsystem in the Linux kernel. An attacker with unprivileged access to the guest OS can escalate privileges on the guest.


Remediation

Install update from vendor's website.

References