CVE-2022-1263: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

Affected products

• Linux Linux Kernel: before 5.18 (fixed in 5.18); version 5.18 only
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only

Published 2022-08-31. Last modified 2026-06-17.