Rapid7 Vulnerability & Exploit Database

CentOS Linux: CVE-2022-2196: Important: kernel-rt security and bug fix update (Multiple Advisories)

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

CentOS Linux: CVE-2022-2196: Important: kernel-rt security and bug fix update (Multiple Advisories)

Severity

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

01/09/2023

Created

05/15/2023

Added

05/15/2023

Modified

05/25/2023

Description

A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or past commit 2e7eab81425a

Solution(s)

centos-upgrade-kernel
centos-upgrade-kernel-rt

References

CVE-2022-2196

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;