cve/2022/CVE-2022-33741.md

### [CVE-2022-33741](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33741)
![](https://img.shields.io/static/v1?label=Product&message=Linux&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=xen&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3F%20consult%20Xen%20advisory%20XSA-403%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=unknown&color=brighgreen)

### Description

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon