CVE-2022-50228

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

Don't BUG/WARN on interrupt injection due to GIF being cleared,

since it's trivial for userspace to force the situation via

KVM_SET_VCPU_EVENTS (even if having at least a WARN there would be correct

for KVM internally generated injections).

kernel BUG at arch/x86/kvm/svm/svm.c:3386!

invalid opcode: 0000 [#1] SMP

CPU: 15 PID: 926 Comm: smm_test Not tainted 5.17.0-rc3+ #264

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015

RIP: 0010:svm_inject_irq+0xab/0xb0 [kvm_amd]

Code: <0f> 0b 0f 1f 00 0f 1f 44 00 00 80 3d ac b3 01 00 00 55 48 89 f5 53

RSP: 0018:ffffc90000b37d88 EFLAGS: 00010246

RAX: 0000000000000000 RBX: ffff88810a234ac0 RCX: 0000000000000006

RDX: 0000000000000000 RSI: ffffc90000b37df7 RDI: ffff88810a234ac0

RBP: ffffc90000b37df7 R08: ffff88810a1fa410 R09: 0000000000000000

R10: 0000000000000000 R11: 00000

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References