CVE-2022-33745
- State
- Published
- Severity
- Not scored
- Published
- Jul 26, 2022
- Updated
- Aug 3, 2024
- Reserved
- Jun 15, 2022
Description
insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
xenXen |
|
References
- https://xenbits.xenproject.org/xsa/advisory-408.txt
- http://xenbits.xen.org/xsa/advisory-408.html
- [oss-security] 20220726 Xen Security Advisory 408 v2 (CVE-2022-33745) - insufficient TLB flush for x86 PV guests in shadow modemailing-list
- [oss-security] 20220726 Xen Security Advisory 408 v3 (CVE-2022-33745) - insufficient TLB flush for x86 PV guests in shadow modemailing-list
- FEDORA-2022-4f7cd241e2vendor-advisory
- FEDORA-2022-a0d7a5eaf2vendor-advisory
- DSA-5272vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.