PT-2022-7531 · Xen+2 · Xen+2

Charles Arnold · Published 2022-07-26 · Updated 2024-09-11 · CVE-2022-33745

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description The issue is related to insufficient checking of input data in the Shadow Mode component of the Xen hypervisor, which can allow an attacker to elevate their privileges. The problem is specifically associated with an insufficient TLB flush for x86 PV guests in shadow mode. This mode is used for migration and as a workaround for kernels unaware of L1TF. A code change intended to address another issue missed a variable's change in meaning, leading to incorrect TLB flush conditions and omitting necessary flushes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-07017

CVE-2022-33745

DSA-5272-1

OPENSUSE-SU-2022_2597-1

OPENSUSE-SU-2022_2599-1

OPENSUSE-SU-2022_3665-1

OPENSUSE-SU-2024:12219-1

SUSE-SU-2022:2557-1

SUSE-SU-2022:2560-1

SUSE-SU-2022:2569-1

SUSE-SU-2022:2574-1

SUSE-SU-2022:2591-1

SUSE-SU-2022:2597-1

SUSE-SU-2022:2599-1

SUSE-SU-2022:2599-2

SUSE-SU-2022:2600-1

SUSE-SU-2022:2601-1

SUSE-SU-2022:3665-1

Affected Products

Red Os

Suse

Xen

References · 78

• https://bdu.fstec.ru/vul/2024-07017 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:2600-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2022/07/26/2 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2022:3665-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2591-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2599-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2560-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-33745 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:2574-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-33745 · Vendor Advisory
• http://openwall.com/lists/oss-security/2022/07/26/3 · Patch
• http://xenbits.xen.org/xsa/advisory-408.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2569-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33745 · Security Note
• https://xenbits.xenproject.org/xsa/advisory-408.txt · Vendor Advisory