{"id":"CVE-2022-1263","details":"A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.","modified":"2026-10-22T07:24:41.993895257Z","published":"2022-08-31T15:33:00Z","related":["SUSE-SU-2022:3585-1","SUSE-SU-2022:3844-1","SUSE-SU-2022:4617-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1263.json","cna_assigner":"redhat","cwe_ids":["CWE-476"]},"references":[{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2022-1263"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2022/04/07/1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1263.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1263"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072698"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa6c4"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/torvalds/linux","events":[{"introduced":"b2d229d4ddb17db541098b83524d901257e93845"},{"fixed":"5593473a1e6c743764b08e3b6071cb43b5cfa6c4"}],"database_specific":{"extracted_events":[{"strategy":"StandaloneSingleVersion","range":[{"introduced":"Fixed in kernel v5.18-rc3"},{"last_affected":"Fixed in kernel v5.18-rc3"}],"source":"AFFECTED_FIELD"},{"range":[{"fixed":"5593473a1e6c743764b08e3b6071cb43b5cfa6c4"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["Fixed in kernel v5.18-rc3"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-1263.json","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["63576216823795686201151139978163102753","290393549997474883304047313605210535983","196211528893455829345470730213509464393","87485303546277371560945813498749108471","124058985932258676746208023286689778433"]},"id":"CVE-2022-1263-a50c09e5","signature_type":"Line","signature_version":"v1","source":"https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa6c4","target":{"file":"virt/kvm/kvm_main.c"},"deprecated":false},{"target":{"file":"virt/kvm/kvm_main.c","function":"kvm_vcpu_destroy"},"deprecated":false,"digest":{"function_hash":"270974885668887457538127732411651716852","length":231},"id":"CVE-2022-1263-c4044a29","signature_type":"Function","signature_version":"v1","source":"https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa6c4"}],"vanir_signatures_modified":"2026-10-22T07:24:41Z"}}],"schema_version":"1.9.2"}