PT-2022-15801 · Xen+1 · Xen+1

Julien Grall · Published 2022-01-25 · Updated 2024-06-15 · CVE-2022-23034

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description A PV guest could cause a denial of service (DoS) in Xen while unmapping a grant. This issue arises from the introduction of reference counting for grant mappings when a PV guest has the IOMMU enabled. PV guests can request two forms of mappings, and when both are in use for an individual mapping, unmapping can be requested in two steps. The reference count for such a mapping would then be mistakenly decremented twice, leading to an underflow of the counters. This underflow triggers a hypervisor bug check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2022-23034

DSA-5117-1

OPENSUSE-SU-2022:0333-1

OPENSUSE-SU-2022_0333-1

OPENSUSE-SU-2024:11781-1

SUSE-SU-2022:0331-1

SUSE-SU-2022:0332-1

SUSE-SU-2022:0333-1

SUSE-SU-2022:0342-1

SUSE-SU-2022:0359-1

SUSE-SU-2022:0467-1

SUSE-SU-2022:0468-1

SUSE-SU-2022:0469-1

SUSE-SU-2022:14886-1

SUSE-SU-2022_0331-1

SUSE-SU-2022_0332-1

SUSE-SU-2022_0342-1

SUSE-SU-2022_0359-1

SUSE-SU-2022_14886-1

Affected Products

Suse

Xen

References · 46

• https://osv.dev/vulnerability/SUSE-SU-2022:0468-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0359-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0467-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0342-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0469-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0333-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-23034 · Vendor Advisory
• https://debian.org/security/2022/dsa-5117 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMR6UBGJW6JKND7IILGQ2CU35EQPF3E3 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0333-1 · Vendor Advisory
• https://xenbits.xenproject.org/xsa/advisory-394.txt · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:14886-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23034 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-23034 · Vendor Advisory
• https://security.gentoo.org/glsa/202208-23 · Vendor Advisory