CVE-2022-23034
published 2022-01-25CVE-2022-23034: A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.34%
26.1th percentile
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | xen | < xen 4.16.0+51-g0941d6cb-1 (bookworm) | xen 4.16.0+51-g0941d6cb-1 (bookworm) |
| fedoraproject | fedora | — | — |
| xen | xen | >= 0 < 4.14.4+74-gd7b22226b5-1 | 4.14.4+74-gd7b22226b5-1 |
| xen | xen | >= 0 < 4.16.0+51-g0941d6cb-1 | 4.16.0+51-g0941d6cb-1 |
| xen | xen | >= 0 < 4.16.0+51-g0941d6cb-1 | 4.16.0+51-g0941d6cb-1 |
| xen | xen | >= 0 < 4.16.0+51-g0941d6cb-1 | 4.16.0+51-g0941d6cb-1 |
| xen | xen | >= 3.2.0 < 4.13.0 | 4.13.0 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
xen: A PV guest could DoS Xen while unmapping a grant (XSA-394)
vendor_redhat·2022-01-25·CVSS 5.5
CVE-2022-23034 [MEDIUM] CWE-191 xen: A PV guest could DoS Xen while unmapping a grant (XSA-394)
xen: A PV guest could DoS Xen while unmapping a grant (XSA-394)
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.
Package: kernel-xen (Red Hat Enterprise Linux 5) - Not affected
Debian
CVE-2022-23034: xen - A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference c...
vendor_debian·2022·CVSS 5.5
CVE-2022-23034 [MEDIUM] CVE-2022-23034: xen - A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference c...
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.
Scope: local
bookworm: resolved (fixed in 4.16.0+51-g0941d6cb-1)
bullseye: resolved (fixed in 4.14.4+74-gd7b22226b5-1)
forky: resolved (fixed in 4.16.0+51-g0941d6cb-1)
sid: resolved (fixed in 4.16.0+51-g0941d6cb-1)
trixie: resolved (fixed in 4.16.0+51-g0941d6cb-1)
GHSA
GHSA-5jmq-x85f-gprc: A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV gues
ghsa_unreviewed·2022-01-26
CVE-2022-23034 [MEDIUM] CWE-191 GHSA-5jmq-x85f-gprc: A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV gues
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.
OSV
CVE-2022-23034: A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV gues
osv·2022-01-25·CVSS 5.5
CVE-2022-23034 [MEDIUM] CVE-2022-23034: A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV gues
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.openwall.com/lists/oss-security/2022/01/25/3https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMR6UBGJW6JKND7IILGQ2CU35EQPF3E3/https://security.gentoo.org/glsa/202208-23https://www.debian.org/security/2022/dsa-5117https://xenbits.xenproject.org/xsa/advisory-394.txthttp://www.openwall.com/lists/oss-security/2022/01/25/3https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMR6UBGJW6JKND7IILGQ2CU35EQPF3E3/https://security.gentoo.org/glsa/202208-23https://www.debian.org/security/2022/dsa-5117https://xenbits.xenproject.org/xsa/advisory-394.txt
2022-01-25
Published