CVE-2022-49154

This is a vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem, specifically affecting AMD's Secure Virtual Machine (SVM) implementation. The issue arises from improper handling of guest interrupt requests (IRQs). When guest IRQ values provided exceed expected bounds, it can trigger a kernel panic, leading to a denial of service.

This vulnerability is rated as Moderate impact because exploitation requires local access to the KVM virtualization interface on an AMD host, resulting in a host denial of service without permitting privilege escalation or data exposure. In typical Red Hat Enterprise Linux environments, interaction with the KVM device is restricted to privileged hypervisor management processes such as QEMU and libvirt. The flaw is confined to AMD hardware platforms running KVM and does not impact systems utilizing alternative CPU architectures.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.