CVE-2022-23034
Assigner: XEN
Published: 2022-01-25T13:43:08
State: PUBLISHED
affected: product: xen
vendor: Xen
versions: status: unknown
version: consult Xen advisory XSA-394
credits: value: {'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'This issue was discovered by Julien Grall of Amazon.'}]}}}
descriptions: value: A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.
metrics: other: content: description: description_data: value: Malicious guest kernels may be able to mount a Denial of Service (DoS)
attack affecting the entire system.
type: unknown
problemTypes: descriptions: description: unknown
type: text