CVE-2022-33745

Katalog CVE

CVSS 8.8 · High EPSS 0,30%

Kerentanan pada xen, debian linux +1 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Rincian

Terbit di NVD

26 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://xenbits.xen.org/xsa/advisory-408.html patch · advisory vendor
• https://xenbits.xenproject.org/xsa/advisory-408.txt advisory vendor
• http://www.openwall.com/lists/oss-security/2022/07/26/2 mailing list · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2022/07/26/3 mailing list · patch · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5272 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HUFIMNGYP5VQA...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYI3OMJ7RIZNL...