Vulnerabilities

TI-2022-14866 CVE-2022-33748 · GHSA-fqrh-w8r3-22q6

Improper handling of exceptional conditions in xen

LOW 25

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00272 Published 2022-10-11 No fix listed CWE-755

TI-2022-14865 CVE-2022-33747 · GHSA-wp5g-757j-v342

LOW 18

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g.

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00285 Published 2022-10-11 No fix listed CWE-404

TI-2022-14864 CVE-2022-33746 · GHSA-r55p-5rm2-vqg9

LOW 29

P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00293 Published 2022-10-11 No fix listed CWE-404