Log in Start free

Vulnerability · Published Apr 25, 2023 · Assigned by XEN

CVE-2022-42335

High 7.8

In plain English

A high-severity security flaw in xen from Xen. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 81.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Due to too lax a check in one of the hypervisor routines used for shadow page handling it is possible for a guest with a PCI device passed through to cause the hypervisor to access an arbitrary pointer partially under guest control.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20xen4.17.0-r5ALPINE-CVE-2022-42335
Alpine:v3.21xen4.17.0-r5ALPINE-CVE-2022-42335
Alpine:v3.22xen4.17.0-r5ALPINE-CVE-2022-42335
Alpine:v3.23xen4.17.0-r5ALPINE-CVE-2022-42335
Alpine:v3.24xen4.17.0-r5ALPINE-CVE-2022-42335
Debian:12xen4.17.1+2-gb773c48e36-1DEBIAN-CVE-2022-42335
Debian:13xen4.17.1+2-gb773c48e36-1DEBIAN-CVE-2022-42335
Debian:14xen4.17.1+2-gb773c48e36-1DEBIAN-CVE-2022-42335
Ubuntu:22.04:LTSxenno fix listedUBUNTU-CVE-2022-42335
Ubuntu:24.04:LTSxenno fix listedUBUNTU-CVE-2022-42335
Ubuntu:25.10xenno fix listedUBUNTU-CVE-2022-42335
Ubuntu:26.04:LTSxenno fix listedUBUNTU-CVE-2022-42335
Ubuntu:26.10xenno fix listedUBUNTU-CVE-2022-42335

Affected products (as reported)

VendorProductVersions
Xen xen see references

References