{"id":"CVE-2022-2153","details":"A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.","modified":"2026-05-15T11:54:37.484710571Z","published":"2022-08-31T00:00:00Z","related":["SUSE-SU-2022:3897-1","SUSE-SU-2022:3929-1","SUSE-SU-2022:3930-1","SUSE-SU-2022:3998-1","SUSE-SU-2022:4053-1","SUSE-SU-2022:4072-1","SUSE-SU-2022:4272-1","SUSE-SU-2022:4273-1","SUSE-SU-2022:4573-1","SUSE-SU-2022:4574-1","SUSE-SU-2022:4589-1","SUSE-SU-2022:4614-1","SUSE-SU-2022:4615-1","SUSE-SU-2022:4617-1"],"database_specific":{"cwe_ids":["CWE-476"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2153.json","cna_assigner":"redhat"},"references":[{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2022/06/22/1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2153.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2153"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069736"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/00b5f37189d24ac3ed46cb7f11742094778c46ce"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/7ec37d1cbe17d8189d9562178d8b29167fe1c31a"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/b1e34d325397a33d97d845e312d7cf2a8b646b44"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"}],"schema_version":"1.7.5"}