CVE-2022-23034: falha em xen
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.3%
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.
Produtos afetados
Xen · xenCVEs relacionadas — xen
No mesmo produto, das mais perigosas para as menos.
Referências
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMR6UBGJW6JKND7IILGQ2CU35EQPF3E3/https://security.gentoo.org/glsa/202208-23https://www.debian.org/security/2022/dsa-5117https://xenbits.xenproject.org/xsa/advisory-394.txthttp://www.openwall.com/lists/oss-security/2022/01/25/3