CVE-2022-50228

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
19/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> KVM: SVM: Don&amp;#39;t BUG if userspace injects an interrupt with GIF=0<br /> <br /> Don&amp;#39;t BUG/WARN on interrupt injection due to GIF being cleared,<br /> since it&amp;#39;s trivial for userspace to force the situation via<br /> KVM_SET_VCPU_EVENTS (even if having at least a WARN there would be correct<br /> for KVM internally generated injections).<br /> <br /> kernel BUG at arch/x86/kvm/svm/svm.c:3386!<br /> invalid opcode: 0000 [#1] SMP<br /> CPU: 15 PID: 926 Comm: smm_test Not tainted 5.17.0-rc3+ #264<br /> Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015<br /> RIP: 0010:svm_inject_irq+0xab/0xb0 [kvm_amd]<br /> Code: 0b 0f 1f 00 0f 1f 44 00 00 80 3d ac b3 01 00 00 55 48 89 f5 53<br /> RSP: 0018:ffffc90000b37d88 EFLAGS: 00010246<br /> RAX: 0000000000000000 RBX: ffff88810a234ac0 RCX: 0000000000000006<br /> RDX: 0000000000000000 RSI: ffffc90000b37df7 RDI: ffff88810a234ac0<br /> RBP: ffffc90000b37df7 R08: ffff88810a1fa410 R09: 0000000000000000<br /> R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000<br /> R13: ffff888109571000 R14: ffff88810a234ac0 R15: 0000000000000000<br /> FS: 0000000001821380(0000) GS:ffff88846fdc0000(0000) knlGS:0000000000000000<br /> CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033<br /> CR2: 00007f74fc550008 CR3: 000000010a6fe000 CR4: 0000000000350ea0<br /> Call Trace:<br /> <br /> inject_pending_event+0x2f7/0x4c0 [kvm]<br /> kvm_arch_vcpu_ioctl_run+0x791/0x17a0 [kvm]<br /> kvm_vcpu_ioctl+0x26d/0x650 [kvm]<br /> __x64_sys_ioctl+0x82/0xb0<br /> do_syscall_64+0x3b/0xc0<br /> entry_SYSCALL_64_after_hwframe+0x44/0xae<br />

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 2.6.32 (including) 4.9.326 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.10 (including) 4.14.291 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15 (including) 4.19.256 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.211 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.137 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.61 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.18.18 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.19 (including) 5.19.2 (excluding)