← Back

CVE-2022-33747

nvd nist
Published: Oct 11, 2022Modified: Nov 21, 2024

JSON object

Loading...
3.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Exploitability: 2.0 / Impact: 1.4
Source: NVD

Description

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation (to replace a large mapping with individual smaller ones). These memory allocations are taken from the global memory pool. A malicious guest might be able to cause the global memory pool to be exhausted by manipulating its own P2M mappings.

Affected (5)

1 product
Xen
1 product
Fedora
1 product
Debian Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
All versions
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Version 35
Version 36
Version 37
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 11.0

References (16)

Source: security@xen.org
Mailing ListPatchThird Party Advisory
Source: security@xen.org
PatchVendor Advisory
Source: security@xen.org
Third Party Advisory
Source: security@xen.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.