description: A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
problem types: CWE-476 - NULL Pointer Dereference.
affected:
{
product: Kernel:KVM
vendor: n/a
versions:
status: affected, version: Fixed in kernel v5.18-rc3
}