Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-49883: Linux kernel KVM may read beyond memory

CVE-2022-49883 · published 1 year ago

Summary

The Linux kernel's KVM component can try to read extra data from a special memory area when running a 64-bit host with a 32-bit guest. This could cause the system to access memory it shouldn't, potentially leading to instability. Update the kernel to the latest version to apply the fix.

What to do

Update linux kernel to version 6.0.8.
Update debian linux to version 6.0.8-1.
Update linux linux_kernel to version 6.0.8 or later.
Update linux linux to version a7ebfbea0f52550d7cdf12c38f3f5eaa7b2b6494 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	linux	linux_kernel	>= 6.0, < 6.0.8 6.1 `cpe:2.3:o:linux:linux_kernel::::::::`
–	linux	linux	< a7ebfbea0f52550d7cdf12c38f3f5eaa7b2b6494 6.0
Linux	linux	kernel	>= 6.0.0, < 6.0.8 Fix: upgrade to 6.0.8
Debian:12	debian	linux	< 6.0.8-1 Fix: upgrade to 6.0.8-1

Original advisory text

KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format On 64 bit host, if the guest doesn't have X86_FEATURE_LM, KVM will access 16 gprs to 32-bit smram image, causing out-ouf-bound ram access. On 32 bit host, the rsm_load_state_64/enter_smm_save_state_64 is compiled out, thus access overflow can't happen.

References

https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49883... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-49883 Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
https://security-tracker.debian.org/tracker/CVE-2022-49883 Vendor Advisory
https://git.kernel.org/stable/c/696db303e54f7352623d9f640e6c51d8fa9d5588 URL
https://git.kernel.org/stable/c/a7ebfbea0f52550d7cdf12c38f3f5eaa7b2b6494 URL

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

7.1 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-125Out-of-bounds Read

Timeline

Published1 May 2025

Updated30 Oct 2026

First seen7 Mar 2026

Sources

CVE-2022-49883 · OSV

CVE-2022-49883 · NVD

CVE-2022-49883 · MITRE

DEBIAN-CVE-2022-49883 · OSV

Track software like this

Free during beta