KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
Summary
GSD-2022-1001117: KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast(). Affects Kernel versions < 9fa2b94443ff41cdecdff6f4d4324d83af01089a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware and software components. The specific vulnerability affects the x86 architecture of the Kernel package. The kvm_irq_delivery_to_apic_fast() function within the Kernel is susceptible to a theoretical NULL pointer dereference. This vulnerability could potentially lead to system crashes or privilege escalation attacks.
Vulnerability Detail
The vulnerability arises from a potential NULL pointer dereference in the kvm_irq_delivery_to_apic_fast() function of the Kernel package. Although the actual impact and attack plausibility have not been proven, the existence of this vulnerability poses a risk to the stability and security of the system. Attackers may be able to exploit this vulnerability to crash the system or gain elevated privileges. The vulnerability has been addressed in the Linux Kernel version v5.17.2 by commit 9fa2b94443ff41cdecdff6f4d4324d83af01089a.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the Kernel package, specifically in the x86 architecture's kvm_irq_delivery_to_apic_fast() function, poses a theoretical risk of NULL pointer dereference. While the actual impact and exploitability have not been proven, it is recommended to update the Kernel package to version v5.17.2 or later to mitigate any potential risks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability could potentially lead to system crashes or privilege escalation attacks.
No, the actual impact and attack plausibility have not been proven.
The vulnerability affects versions prior to v5.17.2 of the Linux Kernel.
Updating the Kernel package to version v5.17.2 or later will address the vulnerability.
No specific workarounds have been provided for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
