Improper handling of exceptional conditions in Xen - CVE-2022-33748
Published: August 11, 2023
Vulnerability identifier: #VU79450
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H]
CVE-ID: CVE-2022-33748
CWE-ID: CWE-755
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. A local user can send specially crafted input and perform a denial of service (DoS) attack.
Affected software
Xen
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
xen-debugsource
xen-doc-html
xen-libs-32bit
xen-libs
xen-libs-debuginfo-32bit
xen-libs-debuginfo
xen-tools
xen-tools-debuginfo
xen-tools-domU
xen-tools-domU-debuginfo
xen
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
xen-debugsource
xen-doc-html
xen-libs-32bit
xen-libs
xen-libs-debuginfo-32bit
xen-libs-debuginfo
xen-tools
xen-tools-debuginfo
xen-tools-domU
xen-tools-domU-debuginfo
xen
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
How to mitigate CVE-2022-33748
Install updates from vendor's website.
xen-debugsource - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-doc-html - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-32bit - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1
xen-libs-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-domU - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-devel - addressed in versions 4.10.4_40-150000.3.84.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-doc-html - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-32bit - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1
xen-libs-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-domU - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-devel - addressed in versions 4.10.4_40-150000.3.84.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
External References
- https://xenbits.xenproject.org/xsa/advisory-411.txt
- http://xenbits.xen.org/xsa/advisory-411.html
- http://www.openwall.com/lists/oss-security/2022/10/11/2
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/
- https://www.debian.org/security/2022/dsa-5272
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/