CVE-2022-48727

A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) subsystem for ARM64 architecture. When an interrupt request synchronizes a system error, the hypervisor evaluates a stale exception syndrome register rather than verifying the actual exception code. If the prior exception was a hypervisor call, this mishandling corrupts the guest return register and causes unrelated guest instructions to execute twice. A local user or guest virtual machine can trigger this behavior, leading to unexpected execution flow, system instability, or a denial of service (DoS).

This vulnerability is rated as having a Low impact for Red Hat Enterprise Linux because exploitation requires a precise timing condition involving asynchronous hardware errors during guest execution on ARM64 virtualization hosts. The flaw only affects systems running KVM hypervisors on 64-bit ARM architecture, with consequences primarily limited to guest instruction re-execution and potential virtual machine instability. Non-ARM64 platforms such as x86_64, s390x, and ppc64le, as well as systems not running KVM guests, are completely unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.