CVE-2022-33748

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description The issue is related to a lock order inversion in transitive grant copy handling. This occurred after a missing cleanup call was inserted on an error handling path as part of XSA-226, without considering locking requirements. As a result, two cooperating guests granting each other transitive grants can cause locks to be acquired in a nested manner but in opposite order. With suitable timing between the involved grant copy operations, this may result in the locking up of a CPU.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.