CVE-2022-49568

Summary

CVE-2022-49568 is a Linux kernel vulnerability affecting KVM device cleanup. Specifically, the error handling in kvm_ioctl_create_device() assumes the existence of a 'destroy' function, which can lead to NULL dereferencing in KVM devices using the 'release' function for device closure, such as Book3s's interrupt controller KVM devices (XICS, XIVE, XIVE-native). This issue has been resolved by adding checks for 'destroy' not being NULL and adding a missing 'release()' function call. This change does not affect the kvm_destroy_devices() function, which removes devices with defined 'release()' functions from the KVM devices list prior to destruction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.