CVE catalog

CVE-2022-42331

xen: CVE-2022-42331

[CVE catalog]

Severity
Medium · CVSS 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.28% · Oct 25, 2026

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxensid4.20.4+39-gf1e1321c87-1fixed
Debianxenforky4.20.4+39-gf1e1321c87-1fixed
Debianxentrixie4.20.3+127-gc42374a105-0+deb13u1fixed
Debianxentrixie-security4.20.4+39-gf1e1321c87-0+deb13u1fixed
Debianxenbookworm4.17.5+72-g01140da4e8-1fixed
Debianxenbookworm-security4.17.7-0+deb12u1fixed
Susexenopenstack cloud 94.11.4_38-2.89.1fixed
Susexenopenstack cloud crowbar 94.11.4_38-2.89.1fixed
Susexenlinux enterprise server for sap applications 12 sp44.11.4_38-2.89.1fixed
Susexenlinux enterprise server 12 sp4-espos4.11.4_38-2.89.1fixed
Susexenlinux enterprise server 12 sp4-ltss4.11.4_38-2.89.1fixed
Susexenlinux enterprise high performance computing 15 sp1-ltss4.12.4_34-150100.3.86.1fixed
Susexenlinux enterprise server 15 sp1-ltss4.12.4_34-150100.3.86.1fixed
Susexenlinux enterprise server for sap applications 15 sp14.12.4_34-150100.3.86.1fixed
Susexenlinux enterprise high performance computing 15 sp3-espos4.14.5_12-150300.3.48.1fixed
Susexenlinux enterprise high performance computing 15 sp3-ltss4.14.5_12-150300.3.48.1fixed
Susexenlinux enterprise real time 15 sp34.14.5_12-150300.3.48.1fixed
Susexenlinux enterprise server 15 sp3-ltss4.14.5_12-150300.3.48.1fixed
Susexenlinux enterprise server for sap applications 15 sp34.14.5_12-150300.3.48.1fixed
Susexenmanager proxy 4.24.14.5_12-150300.3.48.1fixed
Susexenmanager server 4.24.14.5_12-150300.3.48.1fixed
Susexenlinux enterprise micro 5.14.14.5_12-150300.3.48.1fixed
Susexenlinux enterprise micro 5.24.14.5_12-150300.3.48.1fixed
Susexenenterprise storage 7.14.14.5_12-150300.3.48.1fixed
Susexenlinux enterprise high performance computing 15 sp2-ltss4.13.4_20-150200.3.71.1fixed
Susexenlinux enterprise server 15 sp2-ltss4.13.4_20-150200.3.71.1fixed
Susexenlinux enterprise server for sap applications 15 sp24.13.4_20-150200.3.71.1fixed
Susexenenterprise storage 74.13.4_20-150200.3.71.1fixed
Susexenlinux enterprise server 12 sp2-bcl4.7.6_32-43.104.1fixed
Susexenlinux enterprise software development kit 12 sp54.12.4_34-3.88.1fixed
Susexenlinux enterprise server 12 sp54.12.4_34-3.88.1fixed
Susexenlinux enterprise server for sap applications 12 sp54.12.4_34-3.88.1fixed
Opensusexentumbleweed4.17.0_06-1.1fixed
Susexenlinux enterprise micro 5.44.16.3_06-150400.4.25.1fixed
Susexenlinux enterprise micro 5.34.16.3_06-150400.4.25.1fixed
Susexenlinux enterprise module for basesystem 15 sp44.16.3_06-150400.4.25.1fixed
Susexenlinux enterprise module for server applications 15 sp44.16.3_06-150400.4.25.1fixed
Opensusexenleap micro 5.34.16.3_06-150400.4.25.1fixed
Opensusexenleap 15.44.16.3_06-150400.4.25.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxensourcesid4.17.0+74-g3eac216e6e-1not yet assignedNot reported[1033297]
Debianxensourceforky4.17.0+74-g3eac216e6e-1not yet assignedNot reported[1033297]
Debianxensourcetrixie4.17.0+74-g3eac216e6e-1not yet assignedNot reported[1033297]
Debianxensourcebookworm4.17.0+74-g3eac216e6e-1not yet assignedNot reported[1033297]
Susexenrpmopenstack cloud 94.11.4_38-2.89.1Not reportedSUSE-SU-2023:0859-1Not reported
Susexenrpmopenstack cloud crowbar 94.11.4_38-2.89.1Not reportedSUSE-SU-2023:0859-1Not reported
Susexenrpmlinux enterprise server for sap applications 12 sp44.11.4_38-2.89.1Not reportedSUSE-SU-2023:0859-1Not reported
Susexenrpmlinux enterprise server 12 sp4-espos4.11.4_38-2.89.1Not reportedSUSE-SU-2023:0859-1Not reported
Susexenrpmlinux enterprise server 12 sp4-ltss4.11.4_38-2.89.1Not reportedSUSE-SU-2023:0859-1Not reported
Susexenrpmlinux enterprise high performance computing 15 sp1-ltss4.12.4_34-150100.3.86.1Not reportedSUSE-SU-2023:0858-1Not reported
Susexenrpmlinux enterprise server 15 sp1-ltss4.12.4_34-150100.3.86.1Not reportedSUSE-SU-2023:0858-1Not reported
Susexenrpmlinux enterprise server for sap applications 15 sp14.12.4_34-150100.3.86.1Not reportedSUSE-SU-2023:0858-1Not reported
Susexenrpmlinux enterprise high performance computing 15 sp3-espos4.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmlinux enterprise high performance computing 15 sp3-ltss4.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmlinux enterprise real time 15 sp34.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmlinux enterprise server 15 sp3-ltss4.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmlinux enterprise server for sap applications 15 sp34.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmmanager proxy 4.24.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmmanager server 4.24.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmlinux enterprise micro 5.14.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmlinux enterprise micro 5.24.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmenterprise storage 7.14.14.5_12-150300.3.48.1Not reportedSUSE-SU-2023:0847-1Not reported
Susexenrpmlinux enterprise high performance computing 15 sp2-ltss4.13.4_20-150200.3.71.1Not reportedSUSE-SU-2023:0862-1Not reported
Susexenrpmlinux enterprise server 15 sp2-ltss4.13.4_20-150200.3.71.1Not reportedSUSE-SU-2023:0862-1Not reported
Susexenrpmlinux enterprise server for sap applications 15 sp24.13.4_20-150200.3.71.1Not reportedSUSE-SU-2023:0862-1Not reported
Susexenrpmenterprise storage 74.13.4_20-150200.3.71.1Not reportedSUSE-SU-2023:0862-1Not reported
Susexenrpmlinux enterprise server 12 sp2-bcl4.7.6_32-43.104.1Not reportedSUSE-SU-2023:0846-1Not reported
Susexenrpmlinux enterprise software development kit 12 sp54.12.4_34-3.88.1Not reportedSUSE-SU-2023:0845-1Not reported
Susexenrpmlinux enterprise server 12 sp54.12.4_34-3.88.1Not reportedSUSE-SU-2023:0845-1Not reported
Susexenrpmlinux enterprise server for sap applications 12 sp54.12.4_34-3.88.1Not reportedSUSE-SU-2023:0845-1Not reported
Opensusexenrpmtumbleweed4.17.0_06-1.1Not reportedOPENSUSE-SU-2024:12833-1Not reported
Susexenrpmlinux enterprise micro 5.44.16.3_06-150400.4.25.1Not reportedSUSE-SU-2023:0848-2Not reported
Susexenrpmlinux enterprise micro 5.34.16.3_06-150400.4.25.1Not reportedSUSE-SU-2023:0848-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp44.16.3_06-150400.4.25.1Not reportedSUSE-SU-2023:0848-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp44.16.3_06-150400.4.25.1Not reportedSUSE-SU-2023:0848-1Not reported
Opensusexenrpmleap micro 5.34.16.3_06-150400.4.25.1Not reportedSUSE-SU-2023:0848-1Not reported
Opensusexenrpmleap 15.44.16.3_06-150400.4.25.1Not reportedSUSE-SU-2023:0848-1Not reported

[Debian bug #1033297]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libxencall1]Unknown

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • [libxen-dev]Unknown

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • [libxenevtchn1]Unknown

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • [libxengnttab1]Unknown

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • [libxenhypfs1]Unknown

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • [libxenstore4]Unknown

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • [xen-doc]Unknown

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.0+74-g3eac216e6e-1

      dsa · xen · debian · bookworm

Next results

Observed:

References