CVE-2022-42335

State: Published
Severity: Not scored
Published: Apr 25, 2023
Updated: Aug 3, 2024
Reserved: Oct 3, 2022

Description

x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Due to too lax a check in one of the hypervisor routines used for shadow page handling it is possible for a guest with a PCI device passed through to cause the hypervisor to access an arbitrary pointer partially under guest control.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
xenXen	consult Xen advisory XSA-430Unknown

References

https://xenbits.xenproject.org/xsa/advisory-430.txt
http://xenbits.xen.org/xsa/advisory-430.html
[oss-security] 20230425 Xen Security Advisory 430 v2 (CVE-2022-42335) - x86 shadow paging arbitrary pointer dereferencemailing-list
FEDORA-2023-d28433ead1vendor-advisory
GLSA-202402-07vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.