CVE-2022-33747
- State
- Published
- Severity
- Not scored
- Published
- Oct 11, 2022
- Updated
- Aug 3, 2024
- Reserved
- Jun 15, 2022
Description
Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation (to replace a large mapping with individual smaller ones). These memory allocations are taken from the global memory pool. A malicious guest might be able to cause the global memory pool to be exhausted by manipulating its own P2M mappings.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
xenXen |
|
References
- https://xenbits.xenproject.org/xsa/advisory-409.txt
- http://xenbits.xen.org/xsa/advisory-409.html
- [oss-security] 20221011 Xen Security Advisory 409 v3 (CVE-2022-33747) - Arm: unbounded memory consumption for 2nd-level page tablesmailing-list
- FEDORA-2022-5b594b82acvendor-advisory
- DSA-5272vendor-advisory
- FEDORA-2022-d80cc73088vendor-advisory
- FEDORA-2022-99af00f60evendor-advisory
- GLSA-202402-07vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.