Xen · Xen · CVE-2022-33745
**Name of the Vulnerable Software and Affected Versions**
Xen (affected versions not specified)
**Description**
The issue is related to insufficient checking of input data in the Shadow Mode component of the Xen hypervisor, which can allow an attacker to elevate their privileges. The problem is specifically associated with an insufficient TLB flush for x86 PV guests in shadow mode. This mode is used for migration and as a workaround for kernels unaware of L1TF. A code change intended to address another issue missed a variable's change in meaning, leading to incorrect TLB flush conditions and omitting necessary flushes.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.