CVE-2022-50227
MEDIUMLinux Kernel 5.19-5.19.1 - Denial of Service via KVM Xen Timer Reinitialization
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Initialize Xen timer only once Add a check for existing xen timers before initializing a new one. Currently kvm_xen_init_timer() is called on every KVM_XEN_VCPU_ATTR_TYPE_TIMER, which is causing the following ODEBUG crash when vcpu->arch.xen.timer is already set. ODEBUG: init active (active state 0) object type: hrtimer hint: xen_timer_callbac0 RIP: 0010:debug_print_object+0x16e/0x250 lib/debugobjects.c:502 Call Trace: __debug_object_init debug_hrtimer_init debug_init hrtimer_init kvm_xen_init_timer kvm_xen_vcpu_set_attr kvm_arch_vcpu_ioctl kvm_vcpu_ioctl vfs_ioctl
References (2)
Core 2
Scores
CVSS v3
5.5
EPSS
0.0017
EPSS Percentile
6.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (8)
linux/Kernel
5.19.0 - 5.19.2linux
Linux/Linux
< 5.19
Linux/Linux
5.19
Linux/Linux
5.19.2 - 5.19.*
Linux/Linux
536395260582be7443b0b35b0bbb89ffe3947f62 - 9a9b5771e930f408c3419799000f76a9abaf2278
Linux/Linux
536395260582be7443b0b35b0bbb89ffe3947f62 - af735db31285fa699384c649be72a9f32ecbb665
Linux/Linux
6.0
linux/linux_kernel
5.19 - 5.19.2
Published
Jun 18, 2025
Tracked Since
Feb 18, 2026