USN-5987-1: Linux kernel vulnerabilities

It was discovered that the KVM VMX implementation in the Linux kernel did
not properly handle indirect branch prediction isolation between L1 and L2
VMs. An attacker in a guest VM could use this to expose sensitive
information from the host OS or other guest VMs. (CVE-2022-2196)

It was discovered that a use-after-free vulnerability existed in the SGI
GRU driver in the Linux kernel. A local attacker could possibly use this to
cause a denial of service (system crash) or …

code crash cve denial of service driver drm free gpu gru host information isolation kernel linux linux kernel local prediction sensitive information service sgi system use-after-free usn virtual vms vmware vmx vulnerabilities vulnerability