VDB
UBUNTU-CVE-2022-2196
UBUNTU-CVE-2022-2196
PUBLISHED
CVSS 4.599999904632568 MEDIUM
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
Risk Scores
CVSS 4.0
4.599999904632568
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | linux-gcp | 4.15.0-1032.34, 4.15.0-1024.25, 4.15.0-1023.24 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1020.25, 5.15.0-1019.23, 5.15.0-1017.20 |
| Ubuntu:20.04:LTS | linux-riscv-5.11 | 5.11.0-1020.21~20.04.1, 5.11.0-1031.35, 5.11.0-1030.34 |
| Ubuntu:18.04:LTS | linux-ibm-5.4 | 5.4.0-1042.47~18.04.1, 5.4.0-1040.45~18.04.2, 5.4.0-1037.42~18.04.1 |
| Ubuntu:18.04:LTS | linux-aws-5.0 | 0, 5.0.0-1021.24~18.04.1, 5.0.0-1022.25~18.04.1 |
| Ubuntu:22.04:LTS | linux-riscv | 5.15.0-1005.5, 5.15.0-1028.32, 5.15.0-1027.31 |
| Ubuntu:20.04:LTS | linux-gcp | 5.4.0-1062.66, 5.4.0-1101.110, 5.4.0-1100.109 |
| Ubuntu:18.04:LTS | linux-gcp-5.4 | 5.4.0-1044.47~18.04.2, 5.4.0-1046.49~18.04.1, 5.4.0-1049.53~18.04.1 |
| Ubuntu:18.04:LTS | linux-raspi-5.4 | 5.4.0-1044.48~18.04.1, 5.4.0-1043.47~18.04.1, 5.4.0-1042.46~18.04.3 |
| Ubuntu:20.04:LTS | linux-oracle-5.8 | 5.8.0-1031.32~20.04.2, 5.8.0-1033.34~20.04.1, 5.8.0-1034.35~20.04.2 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-41.44, 5.15.0-40.43, 5.15.0-39.42 |
| Ubuntu:22.04:LTS | linux-azure | 5.13.0-1006.7, 5.15.0-1034.41, 5.15.0-1033.40 |
| Ubuntu:18.04:LTS | linux-aws-5.3 | 5.3.0-1034.36, 5.3.0-1033.35, 5.3.0-1032.34~18.04.2 |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 0, 5.3.0-1007.8~18.04.1, 5.3.0-1032.33~18.04.1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | 5.19.0-28.29~22.04.1, 0, 5.19.0-32.33~22.04.1 |
| Ubuntu:22.04:LTS | linux-realtime | 5.15.0-1032.35, 0 |
| Ubuntu:20.04:LTS | linux-aws | 5.4.0-1018.18, 0, 5.3.0-1003.3 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-aws-fips | 5.4.0-1081.88+fips1, 5.4.0-1080.87+fips1, 5.4.0-1078.84+fips1 |
| Ubuntu:18.04:LTS | linux-aws-5.4 | 5.4.0-1018.18~18.04.1, 5.4.0-1020.20~18.04.2, 5.4.0-1022.22~18.04.1 |
| Ubuntu:20.04:LTS | linux-gcp-5.13 | 5.13.0-1023.28~20.04.1, 0, 5.13.0-1008.9~20.04.3 |
…and 81 more
Timeline
- Jan 9, 2023 CVE Published
- Oct 28, 2026 CVE Updated
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
- Oct 30, 2026 Distribution Patch
References
- https://ubuntu.com/security/CVE-2022-2196 report
- https://git.kernel.org/linus/2e7eab81425ad6c875f2ed47c0ce01e78afc38a5 report
- https://ubuntu.com/security/notices/USN-5970-1 advisory
- https://ubuntu.com/security/notices/USN-5976-1 advisory
- https://ubuntu.com/security/notices/USN-5977-1 advisory
- https://ubuntu.com/security/notices/USN-5978-1 advisory
- https://ubuntu.com/security/notices/USN-5979-1 advisory
- https://ubuntu.com/security/notices/USN-5980-1 advisory
- https://ubuntu.com/security/notices/USN-5982-1 advisory
- https://ubuntu.com/security/notices/USN-5985-1 advisory
- https://ubuntu.com/security/notices/USN-5987-1 advisory
- https://ubuntu.com/security/notices/USN-6004-1 advisory
- https://ubuntu.com/security/notices/USN-6020-1 advisory
- https://ubuntu.com/security/notices/USN-6151-1 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-2196 report