{"affected":[{"product":"kernel","source":"CNA: redhat","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in kernel 5.18-rc4"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V1.1","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2022-0171","cwes":["CWE-459"],"description":"A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).","epss":{"date":"2026-11-02","percentile":0.22585,"score":0.00299},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793643672058,"publishedAt":1661472000000,"references":[{"source":"CNA: redhat","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038940"},{"source":"CNA: redhat","tags":[],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=683412ccf61294d727ead4a73d97397396e69a6b"},{"source":"CNA: redhat","tags":[],"url":"https://access.redhat.com/security/cve/CVE-2022-0171"},{"source":"CNA: redhat","tags":["vendor-advisory"],"url":"https://www.debian.org/security/2022/dsa-5257"},{"source":"CNA: redhat","tags":["mailing-list"],"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038940"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=683412ccf61294d727ead4a73d97397396e69a6b"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://access.redhat.com/security/cve/CVE-2022-0171"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://www.debian.org/security/2022/dsa-5257"},{"source":"ADP: CVE","tags":["mailing-list","x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"remediation":[],"revision":"19ca9866c81e478e6a2020fa848073625437ca28b1dd6a3b696974c02170a5ff","sources":[{"modifiedAt":1793643672058,"name":"CNA: redhat","retrievedAt":1793646506283,"url":"https://www.cve.org/CVERecord?id=CVE-2022-0171"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793646507905,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0171"}],"ssvc":{"assessedAt":1791492875679,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2022-0171","updatedAt":1793646507905}