CVE-2022-2196

Low

No strong exploitation signal.

CVSS base

5.8 MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

EPSS — probability of exploitation (30 days)

0.3%

21.4th percentile

CISA KEV

Not listed

Weakness / dates

CWE-1188

Published 2023-01-09 · modified 2026-08-07

CVSS breakdown

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Attack Vector	L	Local
Attack Complexity	H	High
Privileges Required	L	Low
User Interaction	N	None
Scope	U	Unchanged
Confidentiality	L	Low
Integrity	H	High
Availability	L	Low

Timeline

2023-01-09 — Published (NVD)
2026-08-07 — Last modified (NVD)

Description

A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).

Affected

debian linux

References

Official: NVD · CVE.org