CVE catalog

CVE-2022-33746

xen: CVE-2022-33746

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.29% · Oct 25, 2026

P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxensid4.20.4+39-gf1e1321c87-1fixed
Debianxenforky4.20.4+39-gf1e1321c87-1fixed
Debianxentrixie4.20.3+127-gc42374a105-0+deb13u1fixed
Debianxentrixie-security4.20.4+39-gf1e1321c87-0+deb13u1fixed
Debianxenbookworm4.17.5+72-g01140da4e8-1fixed
Debianxenbookworm-security4.17.7-0+deb12u1fixed
Susexenlinux enterprise module for basesystem 15 sp34.14.5_08-150300.3.40.1fixed
Susexenlinux enterprise module for server applications 15 sp34.14.5_08-150300.3.40.1fixed
Susexenlinux enterprise micro 5.14.14.5_08-150300.3.40.1fixed
Susexenlinux enterprise micro 5.24.14.5_08-150300.3.40.1fixed
Opensusexenleap micro 5.24.14.5_08-150300.3.40.1fixed
Opensusexenleap 15.34.14.5_08-150300.3.40.1fixed
Susexenlinux enterprise micro 5.34.16.2_06-150400.4.11.1fixed
Susexenlinux enterprise module for basesystem 15 sp44.16.2_06-150400.4.11.1fixed
Susexenlinux enterprise module for server applications 15 sp44.16.2_06-150400.4.11.1fixed
Opensusexenleap 15.44.16.2_06-150400.4.11.1fixed
Susexenlinux enterprise micro 5.34.16.2_08-150400.4.16.1fixed
Susexenlinux enterprise module for basesystem 15 sp44.16.2_08-150400.4.16.1fixed
Susexenlinux enterprise module for server applications 15 sp44.16.2_08-150400.4.16.1fixed
Opensusexenleap 15.44.16.2_08-150400.4.16.1fixed
Opensusexentumbleweed4.17.0_02-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxensourcesid4.16.2+90-g0d39a6d1ae-1not yet assignedNot reported[1021668]
Debianxensourceforky4.16.2+90-g0d39a6d1ae-1not yet assignedNot reported[1021668]
Debianxensourcetrixie4.16.2+90-g0d39a6d1ae-1not yet assignedNot reported[1021668]
Debianxensourcebookworm4.16.2+90-g0d39a6d1ae-1not yet assignedNot reported[1021668]
Susexenrpmlinux enterprise module for basesystem 15 sp34.14.5_08-150300.3.40.1Not reportedSUSE-SU-2022:3947-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp34.14.5_08-150300.3.40.1Not reportedSUSE-SU-2022:3947-1Not reported
Susexenrpmlinux enterprise micro 5.14.14.5_08-150300.3.40.1Not reportedSUSE-SU-2022:3947-1Not reported
Susexenrpmlinux enterprise micro 5.24.14.5_08-150300.3.40.1Not reportedSUSE-SU-2022:3947-1Not reported
Opensusexenrpmleap micro 5.24.14.5_08-150300.3.40.1Not reportedSUSE-SU-2022:3947-1Not reported
Opensusexenrpmleap 15.34.14.5_08-150300.3.40.1Not reportedSUSE-SU-2022:3947-1Not reported
Susexenrpmlinux enterprise micro 5.34.16.2_06-150400.4.11.1Not reportedSUSE-SU-2022:3727-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp44.16.2_06-150400.4.11.1Not reportedSUSE-SU-2022:3727-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp44.16.2_06-150400.4.11.1Not reportedSUSE-SU-2022:3727-1Not reported
Opensusexenrpmleap 15.44.16.2_06-150400.4.11.1Not reportedSUSE-SU-2022:3727-1Not reported
Susexenrpmlinux enterprise micro 5.34.16.2_08-150400.4.16.1Not reportedSUSE-SU-2022:4007-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp44.16.2_08-150400.4.16.1Not reportedSUSE-SU-2022:4007-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp44.16.2_08-150400.4.16.1Not reportedSUSE-SU-2022:4007-1Not reported
Opensusexenrpmleap 15.44.16.2_08-150400.4.16.1Not reportedSUSE-SU-2022:4007-1Not reported
Opensusexenrpmtumbleweed4.17.0_02-1.1Not reportedOPENSUSE-SU-2024:12561-1Not reported

[Debian bug #1021668]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libxencall1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxen-dev]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxendevicemodel1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxenevtchn1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxenforeignmemory1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxengnttab1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxenhypfs1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxenmisc4.17]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxenstore4]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxentoolcore1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [libxentoollog1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xen-doc]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-amd64]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-amd64-dbg]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-arm64]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-arm64-dbg]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-common]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xenstore-utils]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xen-system-amd64]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

  • [xen-system-arm64]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.2+90-g0d39a6d1ae-1

      dsa · xen · debian · bookworm

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]