What’s Vulnerable › Vulnerabilities
CVE-2022-0516
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-03-10 · updated 2026-06-17
- Weakness: CWE-200
Description
A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4.
Affected products
- Debian Linux: 11.0
- Fedoraproject Fedora: 34, 35
- Linux kernel: before 5.17; 5.17-rc1, 5.17-rc2, 5.17-rc3 — fixed in 5.17
- NetApp H300E Firmware: all versions
- NetApp H300S Firmware: all versions
- NetApp H410C Firmware: all versions
- NetApp H410S Firmware: all versions
- NetApp H500E Firmware: all versions
- NetApp H500S Firmware: all versions
- NetApp H700E Firmware: all versions
- NetApp H700S Firmware: all versions
- RedHat Codeready Linux Builder: all versions
- Red Hat Enterprise Linux: 8.0
- RedHat Enterprise Linux Eus: 8.4
- RedHat Enterprise Linux For Ibm Z Systems: 8.0
- RedHat Enterprise Linux For Ibm Z Systems Eus: 8.4
- RedHat Enterprise Linux For Power Little Endian: 8.0
- RedHat Enterprise Linux For Power Little Endian Eus: 8.4
- RedHat Enterprise Linux Server Aus: 8.4
- RedHat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions: 8.4
- RedHat Enterprise Linux Server Tus: 8.4
- RedHat Enterprise Linux Server Update Services For Sap Solutions: 8.4
- RedHat Virtualization Host: 4.0
How to fix
Upgrade to a fixed version: Linux kernel 5.17. Check the vendor advisory for mitigations.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2050237
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=09a93c1df3eafa43bcdfd7bf837c574911f12f55
- https://security.netapp.com/advisory/ntap-20220331-0009/
- https://www.debian.org/security/2022/dsa-5092
- https://bugzilla.redhat.com/show_bug.cgi?id=2050237
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=09a93c1df3eafa43bcdfd7bf837c574911f12f55
- https://security.netapp.com/advisory/ntap-20220331-0009/
- https://www.debian.org/security/2022/dsa-5092
Get alerted when CVE-2022-0516 or the next vulnerability affects your stack