CVE-2024-45817
published 2024-09-25CVE-2024-45817: In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register. Furthermore, the OS can opt to…
PriorityP338high7.3CVSS 3.1
AVNACLPRNUINSUCLILAL
EPSS
0.54%
42.4th percentile
In x86's APIC (Advanced Programmable Interrupt Controller) architecture,
error conditions are reported in a status register. Furthermore, the OS
can opt to receive an interrupt when a new error occurs.
It is possible to configure the error interrupt with an illegal vector,
which generates an error when an error interrupt is raised.
This case causes Xen to recurse through vlapic_error(). The recursion
itself is bounded; errors accumulate in the the status register and only
generate an interrupt when a new status bit becomes set.
However, the lock protecting this state in Xen will try to be taken
recursively, and deadlock.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xen | < xen 4.17.5+23-ga4e5191dc0-1 (bookworm) | xen 4.17.5+23-ga4e5191dc0-1 (bookworm) |
| xen | xen | >= 0 < 4.16.6-r2 | 4.16.6-r2 |
| xen | xen | >= 0 < 4.17.5-r1 | 4.17.5-r1 |
| xen | xen | >= 0 < 4.18.3-r0 | 4.18.3-r0 |
| xen | xen | >= 0 < 4.18.3-r0 | 4.18.3-r0 |
| xen | xen | >= 0 < 4.19.0-r0 | 4.19.0-r0 |
| xen | xen | >= 0 < 4.19.0-r0 | 4.19.0-r0 |
| xen | xen | >= 0 < 4.19.0-r0 | 4.19.0-r0 |
| xen | xen | >= 0 < 4.17.5+23-ga4e5191dc0-1 | 4.17.5+23-ga4e5191dc0-1 |
| xen | xen | >= 0 < 4.19.1-1 | 4.19.1-1 |
| xen | xen | >= 0 < 4.19.1-1 | 4.19.1-1 |
| xen | xen | >= 4.5.0 | — |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
osv7.3HIGH
vendor_debian7.3HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2024-45817: In x86's APIC (Advanced Programmable Interrupt Controller) architecture,
error conditions are reported in a status register
osv·2024-09-25·CVSS 7.3
CVE-2024-45817 [HIGH] CVE-2024-45817: In x86's APIC (Advanced Programmable Interrupt Controller) architecture,
error conditions are reported in a status register
In x86's APIC (Advanced Programmable Interrupt Controller) architecture,
error conditions are reported in a status register. Furthermore, the OS
can opt to receive an interrupt when a new error occurs.
It is possible to configure the error interrupt with an illegal vector,
which generates an error when an error interrupt is raised.
This case causes Xen to recurse through vlapic_error(). The recursion
itself is bounded; errors accumulate in the the status register and only
generate an interrupt when a new status bit becomes set.
However, the lock protecting this state in Xen will try to be taken
recursively, and deadlock.
GHSA
GHSA-x9f9-xjf3-f3v6: In x86's APIC (Advanced Programmable Interrupt Controller) architecture,
error conditions are reported in a status register
ghsa_unreviewed·2024-09-25
CVE-2024-45817 [HIGH] CWE-209 GHSA-x9f9-xjf3-f3v6: In x86's APIC (Advanced Programmable Interrupt Controller) architecture,
error conditions are reported in a status register
In x86's APIC (Advanced Programmable Interrupt Controller) architecture,
error conditions are reported in a status register. Furthermore, the OS
can opt to receive an interrupt when a new error occurs.
It is possible to configure the error interrupt with an illegal vector,
which generates an error when an error interrupt is raised.
This case causes Xen to recurse through vlapic_error(). The recursion
itself is bounded; errors accumulate in the the status register and only
generate an interrupt when a new status bit becomes set.
However, the lock protecting this state in Xen will try to be taken
recursively, and deadlock.
OSV
CVE-2024-45817: In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register
osv·2024-09-25·CVSS 7.3
CVE-2024-45817 [HIGH] CVE-2024-45817: In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register
In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs. It is possible to configure the error interrupt with an illegal vector, which generates an error when an error interrupt is raised. This case causes Xen to recurse through vlapic_error(). The recursion itself is bounded; errors accumulate in the the status register and only generate an interrupt when a new status bit becomes set. However, the lock protecting this state in Xen will try to be taken recursively, and deadlock.
Debian
CVE-2024-45817: xen - In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error c...
vendor_debian·2024·CVSS 7.3
CVE-2024-45817 [HIGH] CVE-2024-45817: xen - In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error c...
In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs. It is possible to configure the error interrupt with an illegal vector, which generates an error when an error interrupt is raised. This case causes Xen to recurse through vlapic_error(). The recursion itself is bounded; errors accumulate in the the status register and only generate an interrupt when a new status bit becomes set. However, the lock protecting this state in Xen will try to be taken recursively, and deadlock.
Scope: local
bookworm: resolved (fixed in 4.17.5+23-ga4e5191dc0-1)
bullseye: open
forky: resolved (fixed in 4.19.1-1)
sid: resolved (fixed in 4.19.1-1)
trixie: resolved (f
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-25
Published