CVE-2022-33744: Medium severity Linux Linux kernel vulnerability
Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to cause inconsistencies of the rbtree. These inconsistencies can lead to Denial of Service (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-33744?
CVE-2022-33744 has a medium severity rating due to its potential to cause denial of service in dom0 via unprivileged guests.
How do I fix CVE-2022-33744?
To fix CVE-2022-33744, update the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
Which versions of the Linux kernel are affected by CVE-2022-33744?
CVE-2022-33744 affects Linux kernel versions from 3.13 up to, but not including, 5.19.
Who is affected by CVE-2022-33744?
Users of Arm-based Linux systems who run unprivileged guests are affected by CVE-2022-33744.
Can CVE-2022-33744 be exploited remotely?
CVE-2022-33744 requires local access to the unprivileged guest to exploit, but can impact the dom0.