CVE-2022-50228: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50228 affects the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem, specifically related to interrupt injection in AMD SVM (Secure Virtual Machine). The vulnerability was discovered when a BUG condition occurred if userspace injects an interrupt with GIF=0 (NVD, Wiz).

The vulnerability manifests when userspace attempts to inject an interrupt while the Global Interrupt Flag (GIF) is cleared. This condition triggers a kernel BUG in the svm_inject_irq function at arch/x86/kvm/svm/svm.c:3386. The issue occurs because the code would BUG/WARN on interrupt injection due to GIF being cleared, even though it's possible for userspace to force this situation via KVM_SET_VCPU_EVENTS (NVD).

When triggered, this vulnerability causes a kernel panic through the BUG condition, leading to a system crash. This can result in denial of service for the host system running KVM with AMD SVM virtualization (NVD).

The vulnerability has been resolved in the Linux kernel by modifying the behavior to not BUG/WARN on interrupt injection when GIF is cleared, as this is a legitimate condition that can be triggered by userspace (NVD).