CVE-2022-33741: Infoleak
Last updated 25 April 2025
Other sources
Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-33741?
CVE-2022-33741 has been classified with a medium severity rating due to potential data leaks.
How do I fix CVE-2022-33741?
To fix CVE-2022-33741, update to the latest recommended versions of affected software, such as linux version 5.10.223-1 or higher.
What systems are affected by CVE-2022-33741?
CVE-2022-33741 affects various versions of the Linux Kernel, Debian Linux 10.0 and 11.0, as well as specific Fedora versions.
What type of vulnerability is CVE-2022-33741?
CVE-2022-33741 is a vulnerability that involves improper memory handling leading to data exposure.
Can I mitigate CVE-2022-33741 without updating?
It is not recommended to rely on mitigations as the best resolution for CVE-2022-33741 is to apply the appropriate updates as soon as possible.