{"action":"Upgrade xen to 4.16.0+51-g0941d6cb-1 or later.","affected":[{"fixed":"4.16.0+51-g0941d6cb-1","introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["4.16.0+51-g0941d6cb-1"],"id":"tcs_01M5NGGMFT7HJHP6NCB4ZEP3H0","modified_at":"2026-11-03T08:03:50.023095095Z","published_at":"2022-01-25T14:15:08.967Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-23033","https://security-tracker.debian.org/tracker/CVE-2022-23033"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-23033#Debian:14/xen","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-23033"}],"summary":"arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm (p2m_remove_mapping, guest_physmap_remove_page, and p2m_set_e"}