CVE-2022-0171

Katalog CVE

CVSS 5.5 · Medium EPSS 0,30%

Kerentanan Incomplete Cleanup pada linux kernel, redhat enterprise linux +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).

Rincian

Terbit di NVD

26 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-459: Incomplete Cleanup
CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=683412ccf61294d727ead4a73d973973... mailing list · patch · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2038940 issue tracking · patch · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2022-0171 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5257 advisory pihak ketiga