CVEvulnerability
CVE-2022-33746
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-10-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-404
Description
P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing.
Affected configurations
• xen xen (>= 4.13.0 <= 4.16.1)
• fedoraproject fedora 35
• fedoraproject fedora 36
• fedoraproject fedora 37
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- http://www.openwall.com/lists/oss-security/2022/10/11/3 Mailing List, Mitigation, Patch, Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-410.html Mitigation, Patch, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202402-07 security.gentoo.org
- https://www.debian.org/security/2022/dsa-5272 Third Party Advisory
- https://xenbits.xenproject.org/xsa/advisory-410.txt Mitigation, Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/10/11/3 Mailing List, Mitigation, Patch, Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-410.html Mitigation, Patch, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202402-07 security.gentoo.org
- https://www.debian.org/security/2022/dsa-5272 Third Party Advisory
- https://xenbits.xenproject.org/xsa/advisory-410.txt Mitigation, Patch, Vendor Advisory