cbcvebase.
CVE-2023-46837
published 2024-01-05

CVE-2023-46837: Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes…

PriorityP411low3.3CVSS 3.1
AVLACLPRLUINSUCLINAN
EPSS
0.24%
15.1th percentile
Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes (such as the ones during scrubbing) have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the helpers can overflow and would then result to skip the cache cleaning/invalidation. Therefore there is no guarantee when all the writes will reach the memory. This undefined behavior was meant to be addressed by XSA-437, but the approach was not sufficient.

Affected

13 ranges
VendorProductVersion rangeFixed in
debianxen< xen 4.17.3+10-g091466ba55-1~deb12u1 (bookworm)xen 4.17.3+10-g091466ba55-1~deb12u1 (bookworm)
xenxen<= 4.16—
xenxen>= 0 < 4.16.5-r54.16.5-r5
xenxen>= 0 < 4.16.5-r54.16.5-r5
xenxen>= 0 < 4.17.2-r54.17.2-r5
xenxen>= 0 < 4.18.0-r24.18.0-r2
xenxen>= 0 < 4.18.0-r24.18.0-r2
xenxen>= 0 < 4.18.0-r24.18.0-r2
xenxen>= 0 < 4.18.0-r24.18.0-r2
xenxen>= 0 < 4.18.0-r24.18.0-r2
xenxen>= 0 < 4.17.3+10-g091466ba55-1~deb12u14.17.3+10-g091466ba55-1~deb12u1
xenxen>= 0 < 4.17.3+10-g091466ba55-14.17.3+10-g091466ba55-1
xenxen>= 0 < 4.17.3+10-g091466ba55-14.17.3+10-g091466ba55-1

CVSS provenance

nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
osv3.3LOW
vendor_debian3.3LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.