CVE-2022-3344
Summary
| CVE | CVE-2022-3344 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-10-25 17:15:00 UTC |
| Updated | 2023-11-07 03:51:00 UTC |
| Description | A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0). |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Operating System |
Linux |
Linux Kernel |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| 2130278 – (CVE-2022-3344) CVE-2022-3344 kernel: KVM: SVM: nested shutdown interception could lead to host crash |
MISC |
bugzilla.redhat.com |
|
| [PATCH 0/4] nSVM: fix L0 crash if L2 has shutdown condtion which L1 doesn't intercept |
|
lore.kernel.org |
|
| [PATCH 0/4] nSVM: fix L0 crash if L2 has shutdown condtion which L1 doesn't intercept |
MISC |
lore.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 183334 Debian Security Update for linux (CVE-2022-3344)
- 199209 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5912-1)
- 199211 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5911-1)
- 199220 Ubuntu Security Notification for Linux kernel (Raspberry Pi) Vulnerabilities (USN-5929-1)
- 199223 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5935-1)
- 199227 Ubuntu Security Notification for Linux kernel (GKE) Vulnerabilities (USN-5938-1)
- 199229 Ubuntu Security Notification for Linux kernel (KVM) Vulnerabilities (USN-5941-1)
- 199238 Ubuntu Security Notification for Linux kernel (KVM) Vulnerabilities (USN-5950-1)
- 199243 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-5962-1)
- 753564 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0147-1)
- 753565 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0146-1)
- 753584 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:0149-1)
- 904354 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11359)
- 904360 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11352)
- 904726 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11352-1)
- 906359 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (11352-2)