Oval Definition:oval:org.opensuse.security:def:202233745
Revision Date:2023-06-22Version:1
Title:CVE-2022-33745
Description:

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2022-33745
SUSE CVE-2022-33745
SUSE-SU-2022:2557-1
SUSE-SU-2022:2560-1
SUSE-SU-2022:2569-1
SUSE-SU-2022:2574-1
SUSE-SU-2022:2591-1
SUSE-SU-2022:2597-1
SUSE-SU-2022:2599-1
SUSE-SU-2022:2600-1
SUSE-SU-2022:2601-1
SUSE-IU-2022:1047-1
SUSE-IU-2022:1048-1
SUSE-IU-2022:1049-1
SUSE-IU-2022:1061-1
SUSE-IU-2022:1062-1
SUSE-IU-2022:1067-1
SUSE-SU-2022:2599-2
SUSE-IU-2022:1116-1
SUSE-IU-2022:1117-1
SUSE-IU-2022:1118-1
SUSE-SU-2022:3665-1
Platform(s):openSUSE Leap Micro 5.2
SUSE Linux Enterprise Desktop 15 SP4
SUSE Linux Enterprise Desktop 15 SP5
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Micro 5.2
SUSE Linux Enterprise Module for Basesystem 15 SP4
SUSE Linux Enterprise Module for Basesystem 15 SP5
SUSE Linux Enterprise Module for Server Applications 15 SP4
SUSE Linux Enterprise Server 12 SP4-ESPOS
SUSE Linux Enterprise Server 12 SP4-LTSS
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP2-BCL
SUSE Linux Enterprise Server 15 SP2-LTSS
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15 SP5
SUSE Linux Enterprise Software Development Kit 12 SP5
SUSE Manager Proxy 4.3
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.3
Product(s):
Definition Synopsis
  • openSUSE Leap Micro 5.2 is installed
  • AND Package Information
  • xen-libs-4.14.5_04-150300.3.32.1 is installed
  • AND xen-libs is signed with openSUSE key
  • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.1 is installed
  • AND xen-libs-4.14.5_04-150300.3.32.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.2 is installed
  • AND xen-libs-4.14.5_04-150300.3.32.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP4 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed
  • OR SUSE Linux Enterprise Server 15 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
  • OR SUSE Manager Proxy 4.3 is installed
  • OR SUSE Manager Retail Branch Server 4.3 is installed
  • OR SUSE Manager Server 4.3 is installed
  • AND
  • xen-libs-4.16.1_06-150400.4.8.1 is installed
  • OR xen-tools-domU-4.16.1_06-150400.4.8.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP4 is installed
  • OR SUSE Linux Enterprise Server 15 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
  • OR SUSE Manager Proxy 4.3 is installed
  • OR SUSE Manager Retail Branch Server 4.3 is installed
  • OR SUSE Manager Server 4.3 is installed
  • AND
  • xen-4.16.1_06-150400.4.8.1 is installed
  • OR xen-devel-4.16.1_06-150400.4.8.1 is installed
  • OR xen-tools-4.16.1_06-150400.4.8.1 is installed
  • OR xen-tools-xendomains-wait-disk-4.16.1_06-150400.4.8.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND xen-devel-4.12.4_26-3.74.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND
  • xen-4.12.4_26-3.74.1 is installed
  • OR xen-doc-html-4.12.4_26-3.74.1 is installed
  • OR xen-libs-4.12.4_26-3.74.1 is installed
  • OR xen-libs-32bit-4.12.4_26-3.74.1 is installed
  • OR xen-tools-4.12.4_26-3.74.1 is installed
  • OR xen-tools-domU-4.12.4_26-3.74.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS is installed
  • OR SUSE Linux Enterprise Server 15 SP2-BCL is installed
  • OR SUSE Linux Enterprise Server 15 SP2-LTSS is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
  • AND Package Information
  • xen-4.13.4_12-150200.3.58.1 is installed
  • OR xen-devel-4.13.4_12-150200.3.58.1 is installed
  • OR xen-libs-4.13.4_12-150200.3.58.1 is installed
  • OR xen-tools-4.13.4_12-150200.3.58.1 is installed
  • OR xen-tools-domU-4.13.4_12-150200.3.58.1 is installed
  • OR xen-tools-xendomains-wait-disk-4.13.4_12-150200.3.58.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP4-ESPOS is installed
  • OR SUSE Linux Enterprise Server 12 SP4-LTSS is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND Package Information
  • xen-4.11.4_30-2.76.1 is installed
  • OR xen-doc-html-4.11.4_30-2.76.1 is installed
  • OR xen-libs-4.11.4_30-2.76.1 is installed
  • OR xen-libs-32bit-4.11.4_30-2.76.1 is installed
  • OR xen-tools-4.11.4_30-2.76.1 is installed
  • OR xen-tools-domU-4.11.4_30-2.76.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP5 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • AND Package Information
  • xen-libs-4.17.0_06-150500.1.10 is installed
  • OR xen-tools-domU-4.17.0_06-150500.1.10 is installed
  • BACK