SUSE-SU-2022:0333-1
Advisory lineage Upstream: 3 Downstream: 0
Published: 04 Feb 2022, 08:30
Last modified:04 Feb 2026, 04:09
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
04 Feb 2022, 08:30
Published
Vulnerability first disclosed
04 Feb 2026, 04:09
Last Modified
Vulnerability information updated
Description
Security update for xen This update for xen fixes the following issues: - CVE-2022-23033: Fixed guest_physmap_remove_page not removing the p2m mappings. (XSA-393) (bsc#1194576) - CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. (XSA-394) (bsc#1194581) - CVE-2022-23035: Fixed insufficient cleanup of passed-through device IRQs. (XSA-395) (bsc#1194588)
Affected Systems
- suse•xen&distro=SUSE Linux Enterprise Micro 5.1
< 4.14.3_06-150300.3.18.2
- suse•xen&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3
< 4.14.3_06-150300.3.18.2
- suse•xen&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3
< 4.14.3_06-150300.3.18.2
References (7)
- https://www.suse.com/support/update/announcement/2022/suse-su-20220333-1/
- https://bugzilla.suse.com/1194576
- https://bugzilla.suse.com/1194581
- https://bugzilla.suse.com/1194588
- https://www.suse.com/security/cve/CVE-2022-23033
- https://www.suse.com/security/cve/CVE-2022-23034
- https://www.suse.com/security/cve/CVE-2022-23035