CVE catalog

CVE-2022-42336

xen: CVE-2022-42336

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.27% · Oct 27, 2026

Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads require SSBD active in order to coordinate it, such logic relies on using a per-core counter of threads that have SSBD active. When running on the mentioned hardware, it's possible for a guest to under or overflow the thread counter, because each write to VIRT_SPEC_CTRL.SSBD by the guest gets propagated to the helper that does the per-core active accounting. Underflowing the counter causes the value to get saturated, and thus attempts for guests running on the same core to set SSBD won't have effect because the hypervisor assumes it's already active.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxensid4.20.4+39-gf1e1321c87-1fixed
Debianxenforky4.20.4+39-gf1e1321c87-1fixed
Debianxentrixie4.20.3+127-gc42374a105-0+deb13u1fixed
Debianxentrixie-security4.20.4+39-gf1e1321c87-0+deb13u1fixed
Debianxenbookworm4.17.5+72-g01140da4e8-1fixed
Debianxenbookworm-security4.17.7-0+deb12u1fixed
Opensusexentumbleweed4.17.1_04-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxensourcesid4.17.1+2-gb773c48e36-1not yet assignedNot reported[1036298]
Debianxensourceforky4.17.1+2-gb773c48e36-1not yet assignedNot reported[1036298]
Debianxensourcetrixie4.17.1+2-gb773c48e36-1not yet assignedNot reported[1036298]
Debianxensourcebookworm4.17.1+2-gb773c48e36-1not yet assignedNot reported[1036298]
Opensusexenrpmtumbleweed4.17.1_04-1.1Not reportedOPENSUSE-SU-2024:12959-1Not reported

[Debian bug #1036298]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [xen-devel]Unknown

    Source package: [xen]

    Details (1)

    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.1_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-doc-html]Unknown

    Source package: [xen]

    Details (1)

    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.1_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-libs]Unknown

    Source package: [xen]

    Details (1)

    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.1_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-tools]Unknown

    Source package: [xen]

    Details (1)

    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.1_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-tools-domU]Unknown

    Source package: [xen]

    Details (1)

    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.1_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-tools-xendomains-wait-disk]Unknown

    Source package: [xen]

    Details (1)

    • 4.22.0_02-2.1 · noarch · tumbleweed

      Unknown · Fixed: 4.17.1_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [libxencall1]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxen-dev]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxendevicemodel1]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxenevtchn1]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxenforeignmemory1]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxengnttab1]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxenhypfs1]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxenmisc4.17]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxenstore4]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxentoolcore1]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [libxentoollog1]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [xen-doc]Fixed

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-amd64]Fixed

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-amd64-dbg]Fixed

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.1+2-gb773c48e36-1

      dsa · xen · debian · bookworm

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]