CVE-2022-3707

What it actually does

Double-free memory corruption in intel_gvt_dma_map_guest_page triggered by VGA resource overload in the Intel GVT-g graphics driver, resulting in kernel panic.

Why it matters to the business

A logged-in local user can force a complete system crash, interrupting all workloads and requiring manual reboot with potential data loss for unsaved operations.

How an attack unfolds

An attacker with local shell access crafts input that overloads VGA card resources, causing the driver to call intel_gvt_dma_map_guest_page and trigger the double-free condition that crashes the kernel.

How to fix it

Update the Linux kernel to a version containing commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 or later; apply the vendor-supplied kernel package that includes this fix.

How to confirm the fix worked

Verify the running kernel contains commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 via git log or uname -r against the fixed package; test that the intel_gvt driver no longer panics under the overload condition.

Typical attack path

1. Obtain local user access on a Linux system using the Intel GVT-g driver
2. Trigger the VGA resource overload condition in the graphics driver
3. Invoke intel_gvt_dma_map_guest_page to induce the double-free
4. Crash the kernel resulting in denial of service

How to detect it

Review kernel crash logs and dmesg output for intel_gvt_dma_map_guest_page faults or double-free warnings; correlate with user sessions that accessed graphics devices.

What your security team should do

• Prioritize kernel updates on all systems exposing the Intel GVT-g driver
• Monitor for local privilege contexts that could reach the driver
• Apply the fix commit 830b3c68c1fb1e9176028d02ef86f3cf76aa2476 across the fleet