CVE-2022-48969

A flaw was found in the Linux kernel's xen-netfront component. During a live migration of a virtual machine, the Networked Asynchronous Packet Interface (NAPI) for the old network shared ring (sring) is not properly removed before a new one is established. A local attacker with low privileges could exploit this timing issue by enabling busy_poll or busy_read when resuming a virtual machine. This can lead to a NULL pointer dereference, causing a system crash and a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.