race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 26, 2024 | Apr 5, 2022 |
| Debian | — | Upgrade xen | Nov 4, 2022 | Apr 5, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Feb 5, 2024 | Apr 5, 2022 |
| Suse | — | Upgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade xen-tools-xendomains-wait-diskUpgrade xen-develUpgrade xen-toolsUpgrade xenUpgrade xen-libsUpgrade xen-libs-32bit | Oct 26, 2022 | Apr 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub