CVE-2022-33745: High severity xen xapi vulnerability
insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-33745?
CVE-2022-33745 is a vulnerability that allows insufficient TLB flush for x86 PV guests in shadow mode.
How does CVE-2022-33745 affect Xen?
CVE-2022-33745 affects Xen, specifically x86 PV guests in shadow paging mode.
What is the severity of CVE-2022-33745?
The severity of CVE-2022-33745 is high with a CVSS score of 8.8.
How can I fix CVE-2022-33745 on Debian Linux?
To fix CVE-2022-33745 on Debian Linux, update the Xen package to version 4.14.6-1 or later.
How can I fix CVE-2022-33745 on Fedora?
To fix CVE-2022-33745 on Fedora, update the Xen package to version 4.17.2+55-g0b56bed864-1 or later.