CVE-2022-1263CWE-476
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled
published August 31, 2022
What it is
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00438 · 37.0th percentile
- Weakness
- CWE-476 · NULL Pointer Dereference
- Published
- 2022-08-31T15:33Z
EPSS history
Timeline