Vulnerability - CVE-2022-33745

›

›vulnerability›CVE-2022-33745

Name

CVE-2022-33745

Source

NVD ( link)Debian ( link)

Description

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

CWEs

Published Date

Jul 26, 2022

Updated Date

Jun 17, 2026

Workaround

-

Advisories

http://www.openwall.com/lists/oss-security/2022/07/26/2Mailing List

http://www.openwall.com/lists/oss-security/2022/07/26/3Mailing List

http://xenbits.xen.org/xsa/advisory-408.htmlPatch

https://www.debian.org/security/2022/dsa-5272Third Party Advisory

https://xenbits.xenproject.org/xsa/advisory-408.txtVendor Advisory

http://www.openwall.com/lists/oss-security/2022/07/26/2Mailing List

http://www.openwall.com/lists/oss-security/2022/07/26/3Mailing List

http://xenbits.xen.org/xsa/advisory-408.htmlPatch

https://www.debian.org/security/2022/dsa-5272Third Party Advisory

https://xenbits.xenproject.org/xsa/advisory-408.txtVendor Advisory

Analysis#

Affected Component

Analysis

Vulnerability Rating#

8.8

CVSSv31

Others affected component#

Name

Project

Project Version

Version

Status

buildroot

master

4.19.5

Exploitable