CVE Vulnerabilities

CVE-2022-42331

Published: Mar 21, 2023 | Modified: Feb 04, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.

Affected Software

Name Vendor Start Version End Version
Xen Xen 4.5.0 (including) 4.17.0 (including)
Xen Ubuntu bionic *
Xen Ubuntu kinetic *
Xen Ubuntu lunar *
Xen Ubuntu mantic *
Xen Ubuntu trusty *
Xen Ubuntu xenial *

References