CVE-2022-39189: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.

Affected products

• Linux Linux Kernel: from 4.16, before 5.4.244 (fixed in 5.4.244); from 5.5.0, before 5.10.180 (fixed in 5.10.180); from 5.11, before 5.15.60 (fixed in 5.15.60); from 5.16, before 5.18.17 (fixed in 5.18.17)
• Netapp Hci Baseboard Management Controller: version h300s only; version h410c only; version h410s only; version h500s only; version h700s only

Published 2022-09-02. Last modified 2026-06-17.