CVE-2022-33744

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged...

CVE-2022-33744

CVE-2022-33744 is an ARM Xen guest vulnerability where unprivileged guests can provoke a Denial of Service in Dom0 via paravirtual devices. The root cause is a race window in updating an rbtree that tracks guest mappings when mapping guest pages on ARM, potentially crashing Dom0 or blocking furth...

CVE-2022-33744

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged...

Arm guests can cause Dom0 DoS via PV devices

ISSUE DESCRIPTION When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to caus...

CVE-2022-33744: Undefined Security Weakness

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen, whic...

PT-2022-5558 · Linux +5 · Linux +5

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Xen affected versions not specified Description: The issue is related to errors in resource release and a potential Denial of Service DoS in dom0 caused by Arm guests via PV devices. When mapping pages of...

kernel security update

4.18.0-348.2.15.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

GSD-2021-1001965 regmap: Fix possible double-free in regcache_rbtree_exit()

regmap: Fix possible double-free in regcacherbtreeexit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.254 by commit...

PT-2021-26606

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue concerns a possible double-free in the regcache rbtree exit function. This problem was introduced in version v3.12 and is fixed in Linux Kernel version v5.14.16. The actual impact a...

PT-2021-26458

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.215 Description The issue concerns a possible double-free in the regcache rbtree exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-30670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.14 Description The issue is related to a possible double-free in the regcache rbtree exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30601

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue concerns a possible double-free in the regcache rbtree exit function. This problem was introduced in version v3.12 and is fixed in Linux Kernel version v5.14.16. The actual impact a...

PT-2021-30409

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.289 Description The issue is related to a possible double-free in the regcache rbtree exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30453

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.215 Description The issue concerns a possible double-free in the regcache rbtree exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-30484

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.157 Description The issue is related to a possible double-free in the regcache rbtree exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30533

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description The issue concerns a possible double-free in the regcache rbtree exit function. This problem was introduced in version v3.12 and is fixed in Linux Kernel version v5.10.77. The actual impact a...

PT-2021-26489

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.157 Description The issue concerns a possible double-free in the regcache rbtree exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2021-26538

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.77 Description The issue is related to a possible double-free in the regcache rbtree exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30430

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.254 Description The issue is related to a possible double-free in the regcache rbtree exit function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...