CVE-2022-33747

2022-10-1113:15:10

Google

osv.dev

3.8 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

16.7%

JSON

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest’s P2M (Physical-to-Machine) mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation (to replace a large mapping with individual smaller ones). These memory allocations are taken from the global memory pool. A malicious guest might be able to cause the global memory pool to be exhausted by manipulating its own P2M mappings.

CPENameOperatorVersion
xeneq4.1.2-r10
xeneq4.7.1-r5
xeneq4.2.1-r6
xeneq4.3.3-r0
xeneq4.13.0-r2
xeneq4.7.0-r4
xeneq4.16.0-r0
xeneq4.15.2-r0
xeneq4.2.0-r4
xeneq4.4.1-r3