Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-49932

KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace

Medium5.5EPSS 0.21%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace Call kvm_init() only after _all_ setup is complete, as kvm_init() exposes /dev/kvm to userspace and thus allows userspace to create VMs (and call other ioctls). E.g. KVM will encounter a NULL pointer when attempting to add a vCPU to the per-CPU loaded_vmcss_on_cpu list if userspace is able to create a VM before vmx_init() configures said list. BUG: kernel NULL pointer dereference, address: 0000000000000008 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 0 P4D 0 Oops: 0002 [#1] SMP CPU: 6 PID: 1143 Comm: stable Not tainted 6.0.0-rc7+ #988 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP: 0010:vmx_vcpu_load_vmcs+0x68/0x230 [kvm_intel] <TASK> vmx_vcpu_load+0x16/0x60 [kvm_intel] kvm_arch_vcpu_load+0x32/0x1f0 [kvm] vcpu_load+0x2f/0x40 [kvm] kvm_arch_vcpu_create+0x231/0x310 [kvm] kvm_vm_ioctl+0x79f/0xe10 [kvm] ? handle_mm_fault+0xb1/0x220 __x64_sys_ioctl+0x80/0xb0 do_syscall_64+0x2b/0x50 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7f5a6b05743b </TASK> Modules linked in: vhost_net vhost vhost_iotlb tap kvm_intel(+) kvm irqbypass

Timeline

  1. ID reserved

    By Linux

  2. · 1 day later

    Published

  3. · 18 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-49932, by who scored it
Scored byCVSSScoreVector
NVDNVD · Analyzed3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.21% · top 88% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

Affected products

  • Linux · Linux

    • affected dbef2808af6c594922fe32833b30f55f35e9da6d – < e136e969d268b9b89329c816c002e53f60e82985
    • affected dbef2808af6c594922fe32833b30f55f35e9da6d – < e28533c08023c4b319b7f2cd77f3f7c9204eb517
    • affected dbef2808af6c594922fe32833b30f55f35e9da6d – < e32b120071ea114efc0b4ddd439547750b85f618
    • affected b2f7d0adc1260fa33ff3e992d18ff15873e68a67
    • affected 2c0bf2560ca18abe1451db23b8ef8700c67cc44f
    • affected f9971a898a815c2a6cce2932e91a576b28ed4cce
    • affected 40888c31aca3a46f266f1f121679f8e1982df085
    • affected cd3f438fbb9cb60da32dd2b665f7dc9baba1c4ad
    • affected e35a2dc8c7f664ae8a9cc46d19985dc79bfc1083
    • affected 4.9.220 – < 4.10
    • affected 4.14.177 – < 4.15
    • affected 4.19.116 – < 4.20
    • affected 5.4.33 – < 5.5
    • affected 5.5.18 – < 5.6
    • affected 5.6.5 – < 5.7

  • Linux · Linux

    • affected 5.7
    • unaffected < 5.7
    • unaffected 6.1.20 – ≤ 6.1.*
    • unaffected 6.2.7 – ≤ 6.2.*
    • unaffected 6.3 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-49932 badge
[![CVE-2022-49932](https://trackcve.app/badge/CVE-2022-49932.svg)](https://trackcve.app/cve/CVE-2022-49932)

Record last updated .