VULNERABILITY INTELLIGENCE
CVE-2022-33747
CVSS score3.8 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2022-10-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Description
Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation (to replace a large mapping with individual smaller ones). These memory allocations are taken from the global memory pool. A malicious guest might be able to cause the global memory pool to be exhausted by manipulating its own P2M mappings.
Weakness classification
- CWE-404: Improper Resource Shutdown or Release
Primary references
- security@xen.org — Mailing List, Patch, Third Party Advisory
- security@xen.org — Patch, Vendor Advisory
- security@xen.org
- security@xen.org
- security@xen.org
- security@xen.org
- security@xen.org — Third Party Advisory
- security@xen.org — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108