PT-2023-14106 · Suse · Suse

Published 2023-05-17 · Updated 2025-01-22 · CVE-2022-42336

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue concerns the mishandling of guest SSBD selection on AMD hardware, specifically AMD Family 17h and Hygon Family 18h processors. The current logic to set SSBD requires coordination at a core level, as the setting is shared between threads. A per-core counter of threads that have SSBD active is used to keep track of how many threads require SSBD active. However, when running on the mentioned hardware, it's possible for a guest to under or overflow the thread counter, because each write to VIRT SPEC CTRL.SSBD by the guest gets propagated to the helper that does the per-core active accounting. Underflowing the counter causes the value to get saturated, and thus attempts for guests running on the same core to set SSBD won't have effect because the hypervisor assumes it's already active.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-42336

MGASA-2024-0047

OPENSUSE-SU-2024:12959-1

SUSE-SU-2023:2535-1

Affected Products

Suse

References · 32

• https://security-tracker.debian.org/tracker/CVE-2022-42336 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-42336 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2022-42336 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42336 · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0047 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTO3U3WYLAZW3KLPKJZ332FYUREXPZMQ · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0047.html · Security Note
• https://xenbits.xenproject.org/xsa/advisory-431.txt · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-42336 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-42336 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12959-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2535-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-42336 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-42336 · Vendor Advisory
• https://bugzilla.suse.com/1210570 · Note