VULNERABILITY INTELLIGENCE
CVE-2022-2196
CVSS score5.8 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2023-01-09
Last modified2026-08-07
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
Description
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
Weakness classification
- cve-coordination@google.com: CWE-1188
- nvd@nist.gov: CWE-1188
Primary references
- cve-coordination@google.com
- cve-coordination@google.com
- cve-coordination@google.com
- cve-coordination@google.com
- cve-coordination@google.com — Mailing List, Patch, Vendor Advisory
- cve-coordination@google.com — Patch, Third Party Advisory
- cve-coordination@google.com — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108