CVE-2022-42331

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
Xen	xen	—

References

http://www.openwall.com/lists/oss-security/2023/03/21/3Mailing List, Third Party Advisory
http://xenbits.xen.org/xsa/advisory-429.htmlVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APBMS2Q6746AXAFAITNJMGBNFGNMVLWR/Mailing List, Third Party Advisory
https://security.gentoo.org/glsa/202402-07
https://www.debian.org/security/2023/dsa-5378Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-429.txtVendor Advisory
http://www.openwall.com/lists/oss-security/2023/03/21/3Mailing List, Third Party Advisory
http://xenbits.xen.org/xsa/advisory-429.htmlVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APBMS2Q6746AXAFAITNJMGBNFGNMVLWR/Mailing List, Third Party Advisory
https://security.gentoo.org/glsa/202402-07
https://www.debian.org/security/2023/dsa-5378Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-429.txtVendor Advisory

Timeline

Published: Mar 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-423327.8x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Pag CVE-2022-423338.6x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerab CVE-2022-423346.5x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerab CVE-2022-423357.8x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted P CVE-2022-423363.3Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires CVE-2022-423397.8Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulner CVE-2022-42346.1A vulnerability was found in SourceCodester Canteen Management System. It has been rated as problematic. This issue affects the function bui CVE-2022-423407.5Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that CVE-2022-423417.5Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity CVE-2022-423425.5Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability CVE-2022-423436.5Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that c CVE-2022-423448.8Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vu