MediumFix available
xen — security advisory
P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing.
- Products
- xen
- Affected versions
- Not specified
- Fixed versions
- 4.15.4-r0, 4.16.3-r0, 4.17.0-r0
- CVEs
- CVE-2022-33746
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 14:16 UTC · Revision 1
Source evidence
P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing.
osv:ALPINE-CVE-2022-33746
xen
Fixed versions: 4.15.4-r0
xen
Fixed versions: 4.15.4-r0
xen
Fixed versions: 4.16.3-r0
xen
Fixed versions: 4.16.3-r0
xen
Fixed versions: 4.17.0-r0
xen
Fixed versions: 4.17.0-r0
xen
Fixed versions: 4.17.0-r0
xen
Fixed versions: 4.17.0-r0
xen
Fixed versions: 4.17.0-r0
xen
Fixed versions: 4.17.0-r0
xen
Fixed versions: 4.17.0-r0
Complete source record
{
"id": "d0e9380aa04cf7c981f4e870d84a5e7633f1fb0b80dc74dad11995602c3f9572",
"url": "https://osv.dev/vulnerability/ALPINE-CVE-2022-33746",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "ALPINE-CVE-2022-33746",
"summary": "P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time than is reasonable without intermediate preemption checks. Such checking for the need to preempt was so far missing.",
"evidence": "osv:ALPINE-CVE-2022-33746",
"products": [
{
"name": {
"value": "xen",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.15.4-r0",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.15.4-r0",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.16.3-r0",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.16.3-r0",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.17.0-r0",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.17.0-r0",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.17.0-r0",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.17.0-r0",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.17.0-r0",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.17.0-r0",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.17.0-r0",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "ALPINE-CVE-2022-33746",
"aliases": [
"ALPINE-CVE-2022-33746"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.15.4-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.14"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.15.4-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.15"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.16.3-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.16"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.16.3-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.17"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.17.0-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.18"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.17.0-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.19"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.17.0-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.20"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.17.0-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.21"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.17.0-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.22"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.17.0-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.23"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.13.0"
},
{
"fixed": "4.17.0-r0"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:apk/alpine/xen?arch=source",
"ecosystem": "Alpine:v3.24"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-33746.json"
},
"ecosystem_specific": {}
}
],
"modified": "2026-10-15T07:17:54.227029570Z",
"provider": "osv",
"upstream": [
"CVE-2022-33746"
],
"references": [
"https://security.alpinelinux.org/vuln/CVE-2022-33746"
]
},
"related_cves": [
{
"value": "CVE-2022-33746",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 321910,
"published_at": "2022-10-11T13:15:10.033+00:00"
}