QID 354542

a flaw was found in the linux kernel.
The existing kvm sev api has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest vm instance in amd cpu that supports secure encrypted virtualization (sev). (
( CVE-2022-0171) a use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the linux kernels filesystem sub-component.
This flaw allows a local attacker with a user privilege to cause a denial of service. (
( CVE-2022-1184) an out-of-bounds read flaw was found in the linux kernels teletype subsystem.
The issue occurs in how a user triggers a race condition using ioctls tiocsptlck and tiocgptpeer and tiocsti and tcxonc with leakage of memory in the flush_to_ldisc function.
This flaw allows a local user to crash the system or read unauthorized random data from memory. (
( CVE-2022-1462) a use-after-free flaw was found in the linux kernels atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages.
This flaw allows a local user to crash or potentially escalate their privileges on the system. (
( CVE-2022-1679) a flaw was found in kvm.
With shadow paging enabled if invpcid is executed with cr0.pg=0, the invlpg callback is not set, and the result is a null pointer dereference.
This flaw allows a guest user to cause a kernel oops condition on the host, resulting in a denial of service. (
( CVE-2022-1789) a null pointer dereference flaw was found in the linux kernels kvm module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c.
( CVE-2022-1966) no description is available for this( CVE. (

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.