Skip to content

CVE-2022-33745

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around...

8.8 HighFix available

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.30%Down 0.7 points since Jul 27, 2022

What each source reports

NVD Score used 8.8

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Record: CVE-2022-33745
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

CVE List No score

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Record: CVE-2022-33745
Updated: 2026-11-02

EUVDEUVD-2022-36784 No score

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Record: EUVD-2022-36784
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f5vc-gmmj-gpp6 8.8

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around...

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Record: GHSA-f5vc-gmmj-gpp6
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVALPINE-CVE-2022-33745 8.8

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Record: ALPINE-CVE-2022-33745
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-03

OSV 8.8

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Record: CVE-2022-33745
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

Show 14 moreShow less

OSVDEBIAN-CVE-2022-33745 8.8

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Record: DEBIAN-CVE-2022-33745
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-03

OSVUBUNTU-CVE-2022-33745 8.8

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.

Record: UBUNTU-CVE-2022-33745
CVSS 3.1: 8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12219-1 No score

xen-4.16.1_02-3.1 on GA media

These are all security issues fixed in the xen-4.16.1_02-3.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12219-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2557-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Record: SUSE-SU-2022:2557-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2560-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Record: SUSE-SU-2022:2560-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2569-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Record: SUSE-SU-2022:2569-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2574-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Record: SUSE-SU-2022:2574-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2591-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Fixed several upstream bugs (bsc#1027519).

Record: SUSE-SU-2022:2591-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2597-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Fixed several upstream bugs (bsc#1027519).

Record: SUSE-SU-2022:2597-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2599-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Fixed several upstream bugs (bsc#1027519).

Record: SUSE-SU-2022:2599-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2599-2 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Fixed several upstream bugs (bsc#1027519).

Record: SUSE-SU-2022:2599-2
Updated: 2026-11-02

OSVSUSE-SU-2022:2600-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Record: SUSE-SU-2022:2600-1
Updated: 2026-11-02

OSVSUSE-SU-2022:2601-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Record: SUSE-SU-2022:2601-1
Updated: 2026-11-02

OSVSUSE-SU-2022:3665-1 No score

Security update for xen

This update for xen fixes the following issues:

CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806).
CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807).
CVE-2022-26365: Fixed issue where Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (bsc#1200762).
CVE-2022-33740: Fixed issue where Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (bsc#1200762).
CVE-2022-33741: Fixed issue where data residing in the same 4K page as data shared with a backend was being accessible by such backend (bsc#1200762).
CVE-2022-33742: Fixed issue where data residing in the same 4K page as data shared with a backend was being accessible by such backend (bsc#1200762).
CVE-2022-33745: Fixed an insufficient TLB flush for x86 PV guests in shadow mode (bsc#1201394).
CVE-2021-28689: Fixed speculative vulnerabilities with bare (non-shim) 32-bit PV guests (bsc#1185104).

Bugfixes:

Fixed logic error in built-in default of max_event_channels (bsc#1167608, bsc#1201631).
Fixed issue where dom0 fails to boot with constrained vcpus and nodes (bsc#1197081).
Included upstream bugfixes (bsc#1027519).

Record: SUSE-SU-2022:3665-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`xen` Alpine:v3.13	before 4.14.5-r5	4.14.5-r5
`xen` Alpine:v3.14	before 4.15.3-r2	4.15.3-r2
`xen` Alpine:v3.15	before 4.15.3-r2	4.15.3-r2
`xen` Alpine:v3.17	before 4.16.1-r6	4.16.1-r6
`xen` Alpine:v3.18	before 4.16.1-r6	4.16.1-r6
`xen` Alpine:v3.19	before 4.16.1-r6	4.16.1-r6
`xen` Alpine:v3.20	before 4.16.1-r6	4.16.1-r6
`xen` Alpine:v3.21	before 4.16.1-r6	4.16.1-r6
`xen` Alpine:v3.22	before 4.16.1-r6	4.16.1-r6
`xen` Alpine:v3.23	before 4.16.1-r6	4.16.1-r6

Show 56 moreShow less

Affected packages
Package	Affected	Fixed
`xen` Alpine:v3.24	before 4.16.1-r6	4.16.1-r6
`xen` Debian:12	before 4.16.2-1	4.16.2-1
`xen` Debian:13	before 4.16.2-1	4.16.2-1
`xen` Debian:14	before 4.16.2-1	4.16.2-1
`xen` Debian:11 From an advisory covering 22 CVEs	before 4.14.5+86-g1c354767d5-1, plus listed versions 4.14.2+25-gb6a8c4f72d-24.14.3+32-g9de3671772-14.14.3+32-g9de3671772-1~deb11u14.14.3-14.14.3-1~deb11u14.14.4+74-gd7b22226b5-14.14.5+24-g87d90d511c-1	4.14.5+86-g1c354767d5-1
`xen` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 7 CVEs	before 4.12.4_26-3.74.1	4.12.4_26-3.74.1
`xen` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 7 CVEs	before 4.12.4_26-3.74.1	4.12.4_26-3.74.1
`xen` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 7 CVEs	before 4.12.4_26-3.74.1	4.12.4_26-3.74.1
`xen` SUSE:OpenStack Cloud 9 From an advisory covering 10 CVEs	before 4.11.4_30-2.76.1	4.11.4_30-2.76.1
`xen` SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 10 CVEs	before 4.11.4_30-2.76.1	4.11.4_30-2.76.1
`xen` SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 10 CVEs	before 4.11.4_30-2.76.1	4.11.4_30-2.76.1
`xen` SUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 10 CVEs	before 4.11.4_30-2.76.1	4.11.4_30-2.76.1
`xen` SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 10 CVEs	before 4.7.6_24-43.91.1	4.7.6_24-43.91.1
`xen` SUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 10 CVEs	before 4.9.4_30-3.106.1	4.9.4_30-3.106.1
`xen` SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Manager Proxy 4.1 From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Manager Retail Branch Server 4.1 From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Manager Server 4.1 From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Enterprise Storage 7 From an advisory covering 10 CVEs	before 4.13.4_12-150200.3.58.1	4.13.4_12-150200.3.58.1
`xen` SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 10 CVEs	before 4.16.1_06-150400.4.8.1	4.16.1_06-150400.4.8.1
`xen` SUSE:Linux Enterprise Module for Server Applications 15 SP4 From an advisory covering 10 CVEs	before 4.16.1_06-150400.4.8.1	4.16.1_06-150400.4.8.1
`xen` openSUSE:Leap 15.4 From an advisory covering 10 CVEs	before 4.16.1_06-150400.4.8.1	4.16.1_06-150400.4.8.1
`xen` SUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 10 CVEs	before 4.14.5_04-150300.3.32.1	4.14.5_04-150300.3.32.1
`xen` SUSE:Linux Enterprise Module for Server Applications 15 SP3 From an advisory covering 10 CVEs	before 4.14.5_04-150300.3.32.1	4.14.5_04-150300.3.32.1
`xen` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 10 CVEs	before 4.14.5_04-150300.3.32.1	4.14.5_04-150300.3.32.1
`xen` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 10 CVEs	before 4.14.5_04-150300.3.32.1	4.14.5_04-150300.3.32.1
`xen` openSUSE:Leap 15.3 From an advisory covering 10 CVEs	before 4.14.5_04-150300.3.32.1	4.14.5_04-150300.3.32.1
`xen` openSUSE:Leap Micro 5.2 From an advisory covering 10 CVEs	before 4.14.5_04-150300.3.32.1	4.14.5_04-150300.3.32.1
`xen` SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 10 CVEs	before 4.12.4_26-150100.3.75.1	4.12.4_26-150100.3.75.1
`xen` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 10 CVEs	before 4.12.4_26-150100.3.75.1	4.12.4_26-150100.3.75.1
`xen` SUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 10 CVEs	before 4.12.4_26-150100.3.75.1	4.12.4_26-150100.3.75.1
`xen` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 10 CVEs	before 4.12.4_26-150100.3.75.1	4.12.4_26-150100.3.75.1
`xen` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 10 CVEs	before 4.12.4_26-150100.3.75.1	4.12.4_26-150100.3.75.1
`xen` SUSE:Enterprise Storage 6 From an advisory covering 10 CVEs	before 4.12.4_26-150100.3.75.1	4.12.4_26-150100.3.75.1
`xen` SUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 10 CVEs	before 4.10.4_36-150000.3.77.1	4.10.4_36-150000.3.77.1
`xen` SUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 10 CVEs	before 4.10.4_36-150000.3.77.1	4.10.4_36-150000.3.77.1
`xen` SUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 10 CVEs	before 4.10.4_36-150000.3.77.1	4.10.4_36-150000.3.77.1
`xen` SUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 8 CVEs	before 4.14.5_06-150300.3.35.1	4.14.5_06-150300.3.35.1
`xen` SUSE:Linux Enterprise Module for Server Applications 15 SP3 From an advisory covering 8 CVEs	before 4.14.5_06-150300.3.35.1	4.14.5_06-150300.3.35.1
`xen` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 8 CVEs	before 4.14.5_06-150300.3.35.1	4.14.5_06-150300.3.35.1
`xen` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 8 CVEs	before 4.14.5_06-150300.3.35.1	4.14.5_06-150300.3.35.1
`xen` openSUSE:Leap Micro 5.2 From an advisory covering 8 CVEs	before 4.14.5_06-150300.3.35.1	4.14.5_06-150300.3.35.1
`xen` openSUSE:Leap 15.3 From an advisory covering 8 CVEs	before 4.14.5_06-150300.3.35.1	4.14.5_06-150300.3.35.1
`xen` Ubuntu:16.04:LTS	All versions, plus listed versions 4.5.1-0ubuntu14.5.1-0ubuntu24.6.0-1ubuntu14.6.0-1ubuntu24.6.0-1ubuntu4 Show 7 moreShow less 4.6.0-1ubuntu4.14.6.0-1ubuntu4.24.6.0-1ubuntu4.34.6.5-0ubuntu14.6.5-0ubuntu1.14.6.5-0ubuntu1.24.6.5-0ubuntu1.4	None known
`xen` Ubuntu:18.04:LTS	All versions, plus listed versions 4.9.0-0ubuntu34.9.0-0ubuntu44.9.2-0ubuntu1	None known
`xen` Ubuntu:20.04:LTS	All versions, plus listed versions 4.9.2-0ubuntu24.9.2-0ubuntu64.9.2-0ubuntu74.11.3+24-g14b62ab3e5-1ubuntu14.11.3+24-g14b62ab3e5-1ubuntu24.11.3+24-g14b62ab3e5-1ubuntu2.24.11.3+24-g14b62ab3e5-1ubuntu2.3	None known
`xen` Ubuntu:22.04:LTS	All versions, plus listed versions 4.11.4+24-gddaaccbbab-1ubuntu24.16.0-1~ubuntu24.16.0-1~ubuntu2.1	None known
`xen` Ubuntu:24.04:LTS	All versions, plus listed versions 4.17.2-14.17.2+55-g0b56bed864-14.17.2+76-ge1f9cb16e2-14.17.2+76-ge1f9cb16e2-1ubuntu14.17.3+10-g091466ba55-14.17.3+10-g091466ba55-1.1ubuntu24.17.3+10-g091466ba55-1.1ubuntu3	None known
`xen` Ubuntu:25.10	All versions, plus listed versions 4.20.0-1ubuntu14.20.0+68-g35cb38b222-1	None known
`xen` Ubuntu:26.10	All versions, plus listed versions 4.20.2+7-g1badcf5035-2build24.20.2+37-g61ff35323e-1ubuntu14.20.3+127-gc42374a105-1	None known
`xen` Ubuntu:26.04:LTS	All versions, plus listed versions 4.20.0+68-g35cb38b222-14.20.2+7-g1badcf5035-24.20.2+7-g1badcf5035-2build2	None known
`xen` openSUSE:Tumbleweed From an advisory covering 5 CVEs	before 4.16.1_02-3.1	4.16.1_02-3.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-33745 is a high vulnerability (CVSS 8.8) in Xen, published July 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in xen 4.14.5-r5.

References

Show 50 moreShow less