{"schema_version":"1.9.0","id":"CVE-2022-2153","published":"2022-08-31T00:00:00Z","modified":"2026-08-12T03:51:27.380482703Z","related":["SUSE-SU-2022:3897-1","SUSE-SU-2022:3929-1","SUSE-SU-2022:3930-1","SUSE-SU-2022:3998-1","SUSE-SU-2022:4053-1","SUSE-SU-2022:4072-1","SUSE-SU-2022:4272-1","SUSE-SU-2022:4273-1","SUSE-SU-2022:4573-1","SUSE-SU-2022:4574-1","SUSE-SU-2022:4589-1","SUSE-SU-2022:4614-1","SUSE-SU-2022:4615-1","SUSE-SU-2022:4617-1"],"details":"A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/torvalds/linux","events":[{"introduced":"4b0986a3613c92f4ec1bdc7f60ec66fea135991f"},{"last_affected":"4b0986a3613c92f4ec1bdc7f60ec66fea135991f"}],"database_specific":{"extracted_events":[{"introduced":"kernel 5.18"},{"last_affected":"kernel 5.18"}],"source":"AFFECTED_FIELD"}}],"versions":["kernel 5.18","v5.18"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2153.json"}}],"references":[{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2022/06/22/1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2153.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2153"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069736"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/00b5f37189d24ac3ed46cb7f11742094778c46ce"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/7ec37d1cbe17d8189d9562178d8b29167fe1c31a"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/b1e34d325397a33d97d845e312d7cf2a8b646b44"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"}],"database_specific":{"cna_assigner":"redhat","cwe_ids":["CWE-476"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2153.json"}}