Linux Kernel Vulnerability in KVM Affecting AMD Processors

CVE-2022-50228

What is CVE-2022-50228?

A flaw exists in the Linux kernel's KVM component, where an interrupt injection from userspace can lead to system instability. When the guest interrupt flag (GIF) is cleared, it may trigger a kernel BUG at specific points in the KVM code, potentially allowing untrusted userspace code to manipulate the internal state of the virtual machine. This issue primarily impacts systems using AMD processors and requires immediate attention to maintain operational integrity.

References