CVE-2022-23034: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.

Affected products

• Debian Debian Linux: version 9.0 only; version 11.0 only
• Fedoraproject Fedora: version 34 only
• Xen Xen: from 3.2.0, before 4.13.0 (fixed in 4.13.0)

Published 2022-01-25. Last modified 2026-06-17.