Vulnerability Details : CVE-2022-33744

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to cause inconsistencies of the rbtree. These inconsistencies can lead to Denial of Service (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages.
Vulnerability category: Denial of service
Published 2022-07-05 13:15:09
Updated 2022-10-29 02:50:23
Source Xen Project
View at NVD,   CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2022-33744

Probability of exploitation activity in the next 30 days: 0.05%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 12 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2022-33744

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Source
1.9
 LOW AV:L/AC:M/Au:N/C:N/I:N/A:P
3.4
2.9
 nvd@nist.gov
4.7
 MEDIUM CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
1.0
3.6
 nvd@nist.gov

References for CVE-2022-33744

Products affected by CVE-2022-33744

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close