CVE-2022-33744

Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to cause inconsistencies of the rbtree. These inconsistencies can lead to Denial of Service (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages.

• http://www.openwall.com/lists/oss-security/2022/07/05/4Mailing List, Patch, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-406.htmlPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5191Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-406.txtVendor Advisory
• http://www.openwall.com/lists/oss-security/2022/07/05/4Mailing List, Patch, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-406.htmlPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2022/dsa-5191Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-406.txtVendor Advisory

Published

Jul 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-33739CA Clarity 15.8 and below and 15.9.0 contain an insecure XML…7.5
• CVE-2022-3374The Ocean Extra WordPress plugin before 2.0.5 unserialises t…7.2
• CVE-2022-33740Linux disk/nic frontends data leaks T[his CNA information re…7.1
• CVE-2022-33741Linux disk/nic frontends data leaks T[his CNA information re…7.1
• CVE-2022-33742Linux disk/nic frontends data leaks T[his CNA information re…7.1
• CVE-2022-33743network backend may cause Linux netfront to use freed SKBs W…7.8
• CVE-2022-33745insufficient TLB flush for x86 PV guests in shadow mode For …8.8
• CVE-2022-33746P2M pool freeing may take excessively long The P2M pool back…6.5
• CVE-2022-33747Arm: unbounded memory consumption for 2nd-level page tables …3.8
• CVE-2022-33748lock order inversion in transitive grant copy handling As pa…5.6
• CVE-2022-33749XAPI open file limit DoS It is possible for an unauthenticat…5.3
• CVE-2022-3375An issue has been discovered in GitLab affecting all version…3.7