SUSE-SU-2022:3665-1

Advisory lineage Upstream: 8 Downstream: 0
Published: 19 Oct 2022, 18:29
Last modified:04 Feb 2026, 03:26

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Oct 2022, 18:29
Published
Vulnerability first disclosed
04 Feb 2026, 03:26
Last Modified
Vulnerability information updated

Description

Security update for xen This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807). - CVE-2022-26365: Fixed issue where Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (bsc#1200762). - CVE-2022-33740: Fixed issue where Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (bsc#1200762). - CVE-2022-33741: Fixed issue where data residing in the same 4K page as data shared with a backend was being accessible by such backend (bsc#1200762). - CVE-2022-33742: Fixed issue where data residing in the same 4K page as data shared with a backend was being accessible by such backend (bsc#1200762). - CVE-2022-33745: Fixed an insufficient TLB flush for x86 PV guests in shadow mode (bsc#1201394). - CVE-2021-28689: Fixed speculative vulnerabilities with bare (non-shim) 32-bit PV guests (bsc#1185104). Bugfixes: - Fixed logic error in built-in default of max_event_channels (bsc#1167608, bsc#1201631). - Fixed issue where dom0 fails to boot with constrained vcpus and nodes (bsc#1197081). - Included upstream bugfixes (bsc#1027519).

Affected Systems

  • opensuse•xen&distro=openSUSE Leap 15.3

    < 4.14.5_06-150300.3.35.1

  • opensuse•xen&distro=openSUSE Leap Micro 5.2

    < 4.14.5_06-150300.3.35.1

  • suse•xen&distro=SUSE Linux Enterprise Micro 5.1

    < 4.14.5_06-150300.3.35.1

  • suse•xen&distro=SUSE Linux Enterprise Micro 5.2

    < 4.14.5_06-150300.3.35.1

  • suse•xen&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3

    < 4.14.5_06-150300.3.35.1

  • suse•xen&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3

    < 4.14.5_06-150300.3.35.1

References (18)