CVE-2022-1789CWE-476

With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva

published May 31, 2022

CVSS
—
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.7th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2022-05-31T18:48Z
EPSS history
Timeline
  • 31 MAY 18:48Z
    With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva
    cvelistv5