Resource exhaustion in Xen - CVE-2022-33745
Published: July 26, 2022
Vulnerability identifier: #VU65801
CSH Severity: Medium
CVSS v4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H]
CVE-ID: CVE-2022-33745
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to an error in code responsible for migration and work around of kernels unaware of L1TF in shadow mode, related to TLB flush. A remote user with access to x86 PV guest can start the migration process to trigger the vulnerability and exhaust all available memory, resulting in a denial of service (DoS) attack.
Affected software
Xen
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
xen-tools-debuginfo
xen-tools
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-libs
xen-libs-32bit
xen-doc-html
xen-debugsource
xen
xen-tools-domU
xen-tools-domU-debuginfo
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
xen-tools-debuginfo
xen-tools
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-libs
xen-libs-32bit
xen-doc-html
xen-debugsource
xen
xen-tools-domU
xen-tools-domU-debuginfo
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
How to mitigate CVE-2022-33745
Install updates from vendor's website.
xen-tools-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-tools - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1
xen-libs - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-libs-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-doc-html - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-debugsource - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-tools-domU - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-devel - addressed in versions 4.10.4_36-150000.3.77.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen - addressed in versions 4.15.3-4.fc35, 4.16.1-8.fc36
xen-tools - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1
xen-libs - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-libs-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-doc-html - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-debugsource - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-tools-domU - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-devel - addressed in versions 4.10.4_36-150000.3.77.1, 4.12.4_26-3.74.1, 4.12.4_26-150100.3.75.1, 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_12-150200.3.58.1, 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_04-150300.3.32.1, 4.14.5_06-150300.3.35.1, 4.16.1_06-150400.4.8.1
xen - addressed in versions 4.15.3-4.fc35, 4.16.1-8.fc36