CVE-2022-33748 — Improper Handling of Exceptional Conditions in XEN
Severity
5.6MEDIUMNVD
EPSS
0.0%
top 88.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 11
Description
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be acquired nested within one another, but in respectively opposite order. With suitable timing between the involved grant copy operations this may result in the locking up of a CPU.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 1.1 | Impact: 4.0
Affected Packages3 packages
Also affects: Debian Linux 11.0, Fedora 35, 36, 37
Patches
🔴Vulnerability Details
2OSV▶
CVE-2022-33748: lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path↗2022-10-11
GHSA▶
GHSA-fqrh-w8r3-22q6: lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path↗2022-10-11
📋Vendor Advisories
1Debian▶
CVE-2022-33748: xen - lock order inversion in transitive grant copy handling As part of XSA-226 a miss...↗2022