VDB

DEBIAN-CVE-2022-33744

DEBIAN-CVE-2022-33744 PUBLISHED CVSS 4.699999809265137 MEDIUM

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to cause inconsistencies of the rbtree. These inconsistencies can lead to Denial of Service (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages.

Risk Scores

CVSS v3.1
4.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:11linux5.10.92-2, 5.10.127-2~bpo10+1, 5.10.46-4
Debian:14linux0, 0, 0
Debian:13linux0, 0, 0
Debian:12linux0, 0, 0

Timeline

  • Jul 5, 2022 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›