Home

CVE-2022-23034

Description

A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.115

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-debugsource-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-doc-html-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-libs-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-libs-32bit-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-libs-debuginfo-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-libs-debuginfo-32bit-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-tools-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-tools-debuginfo-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-tools-domU-4.12.4_18-3.58.2.x86_64.rpmLinux
SUSE-SU-2022:0469-1(SUSE Linux Enterprise Server 12-SP5 ) xen-tools-domU-debuginfo-4.12.4_18-3.58.2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234