CVE-2023-46839
published 2024-03-20CVE-2023-46839: PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that…
PriorityP428medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.80%
52.6th percentile
PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functions that are otherwise unpopulated. This allows a device to
extend the number of outstanding requests.
Such phantom functions need an IOMMU context setup, but failure to
setup the context is not fatal when the device is assigned. Not
failing device assignment when such failure happens can lead to the
primary device being assigned to a guest, while some of the phantom
functions are assigned to a different domain.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xen | < xen 4.17.3+10-g091466ba55-1~deb12u1 (bookworm) | xen 4.17.3+10-g091466ba55-1~deb12u1 (bookworm) |
| fedoraproject | fedora | — | — |
| xen | xen | >= 0 < 4.16.5-r6 | 4.16.5-r6 |
| xen | xen | >= 0 < 4.16.5-r6 | 4.16.5-r6 |
| xen | xen | >= 0 < 4.17.3-r0 | 4.17.3-r0 |
| xen | xen | >= 0 < 4.18.0-r3 | 4.18.0-r3 |
| xen | xen | >= 0 < 4.18.0-r3 | 4.18.0-r3 |
| xen | xen | >= 0 < 4.18.0-r3 | 4.18.0-r3 |
| xen | xen | >= 0 < 4.18.0-r3 | 4.18.0-r3 |
| xen | xen | >= 0 < 4.18.0-r3 | 4.18.0-r3 |
| xen | xen | >= 0 < 4.17.3+10-g091466ba55-1~deb12u1 | 4.17.3+10-g091466ba55-1~deb12u1 |
| xen | xen | >= 0 < 4.17.3+10-g091466ba55-1 | 4.17.3+10-g091466ba55-1 |
| xen | xen | >= 0 < 4.17.3+10-g091466ba55-1 | 4.17.3+10-g091466ba55-1 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
osv5.3MEDIUM
vendor_debian5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-46839: PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functi
osv·2024-03-20·CVSS 5.3
CVE-2023-46839 [MEDIUM] CVE-2023-46839: PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functi
PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context setup, but failure to setup the context is not fatal when the device is assigned. Not failing device assignment when such failure happens can lead to the primary device being assigned to a guest, while some of the phantom functions are assigned to a different domain.
GHSA
GHSA-8f65-fxmq-vvpx: PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functi
ghsa_unreviewed·2024-03-20
CVE-2023-46839 [MEDIUM] GHSA-8f65-fxmq-vvpx: PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functi
PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functions that are otherwise unpopulated. This allows a device to
extend the number of outstanding requests.
Such phantom functions need an IOMMU context setup, but failure to
setup the context is not fatal when the device is assigned. Not
failing device assignment when such failure happens can lead to the
primary device being assigned to a guest, while some of the phantom
functions are assigned to a different domain.
OSV
CVE-2023-46839: PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functi
osv·2024-03-20·CVSS 5.3
CVE-2023-46839 [MEDIUM] CVE-2023-46839: PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functi
PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functions that are otherwise unpopulated. This allows a device to
extend the number of outstanding requests.
Such phantom functions need an IOMMU context setup, but failure to
setup the context is not fatal when the device is assigned. Not
failing device assignment when such failure happens can lead to the
primary device being assigned to a guest, while some of the phantom
functions are assigned to a different domain.
Red Hat
xen: phantom functions assigned to incorrect contexts
vendor_redhat·2024-03-20·CVSS 5.3
CVE-2023-46839 [MEDIUM] xen: phantom functions assigned to incorrect contexts
xen: phantom functions assigned to incorrect contexts
PCI devices can make use of a functionality called phantom functions,
that when enabled allows the device to generate requests using the IDs
of functions that are otherwise unpopulated. This allows a device to
extend the number of outstanding requests.
Such phantom functions need an IOMMU context setup, but failure to
setup the context is not fatal when the device is assigned. Not
failing device assignment when such failure happens can lead to the
primary device being assigned to a guest, while some of the phantom
functions are assigned to a different domain.
Statement: This vulnerability doesn't affect any supported Red Hat product.
Debian
CVE-2023-46839: xen - PCI devices can make use of a functionality called phantom functions, that when ...
vendor_debian·2023·CVSS 5.3
CVE-2023-46839 [MEDIUM] CVE-2023-46839: xen - PCI devices can make use of a functionality called phantom functions, that when ...
PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context setup, but failure to setup the context is not fatal when the device is assigned. Not failing device assignment when such failure happens can lead to the primary device being assigned to a guest, while some of the phantom functions are assigned to a different domain.
Scope: local
bookworm: resolved (fixed in 4.17.3+10-g091466ba55-1~deb12u1)
bullseye: open
forky: resolved (fixed in 4.17.3+10-g091466ba55-1)
sid: resolved (fixed in 4.17.3+10-g091466ba55-1)
trixie: resolved (fixed in 4.17.3+10-g091466
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-03-20
Published