Lucene search

[email protected]CVE-2022-33746

HistoryOct 11, 2022 - 1:15 p.m.

CVE-2022-33746

2022-10-1113:15:10

CWE-404

[email protected]

web.nvd.nist.gov

cve-2022-33746

nvd

security

information security

vulnerability

p2m pool

second level address translation

preemption checks

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%

JSON

P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing.

Affected configurations

NVD

Node

xenxenRange4.13.0–4.16.1

Node

fedoraprojectfedoraMatch35

fedoraprojectfedoraMatch36

fedoraprojectfedoraMatch37

Node

debiandebian_linuxMatch11.0

CPENameOperatorVersion
xen:xenxenle4.16.1

CPE	Name	Operator	Version
xen:xen	xen	le	4.16.1

CNA Affected

[
  {
    "vendor": "Xen",
    "product": "xen",
    "versions": [
      {
        "version": "consult Xen advisory XSA-410",
        "status": "unknown"
      }
    ]
  }
]