Logo
›
›vulnerability›CVE-2022-33746
Name
CVE-2022-33746
Source
NVD ( link)Debian ( link)
Description
P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing.
CWEs
CWE-404
Published Date
Updated Date
Workaround
-
Advisories
http://www.openwall.com/lists/oss-security/2022/10/11/3Mailing List
http://xenbits.xen.org/xsa/advisory-410.htmlMitigation
https://www.debian.org/security/2022/dsa-5272Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-410.txtMitigation
http://www.openwall.com/lists/oss-security/2022/10/11/3Mailing List
http://xenbits.xen.org/xsa/advisory-410.htmlMitigation
https://www.debian.org/security/2022/dsa-5272Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-410.txtMitigation

Analysis#

Affected Component
Analysis
xen
Exploitable

Vulnerability Rating#

6.5
CVSSv31

Others affected component#

Name
Project
Project Version
Version
Status
xen
buildroot
master
4.19.5
Not Affected