Medium severity5.5NVD Advisory· Published Aug 26, 2022· Updated Jun 17, 2026
CVE-2022-0171
CVE-2022-0171
Description
A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <5.18
- cpe:2.3:o:linux:linux_kernel:5.18:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:5.18:rc3:*:*:*:*:*:*
- (no CPE)
- (no CPE)
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/nvdMailing ListPatchVendor Advisory
- access.redhat.com/security/cve/CVE-2022-0171nvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlnvdMailing ListThird Party Advisory
- www.debian.org/security/2022/dsa-5257nvdThird Party Advisory
News mentions
0No linked articles in our index yet.