p PatchFirst

CVE-2023-34321

CVE-2023-34321 · arm32: The cache may not be properly cleaned/invalidated

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes (such as the ones during scrubbing) have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the helpers can overflow and would then result to skip the cache cleaning/invalidation. Therefore there is no guarantee when all the writes will reach the memory.

CVSS 3.3 · Low · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • xen

    Versions
    • consult Xen advisory XSA-437: Unknown

    No fix published

  • xen Debian:12

    Versions
    • 4.17.1+2-gb773c48e36-1
    • 4.17.2+55-g0b56bed864-1
    • 4.17.2-1
    Affected ranges
    • ECOSYSTEM: < 4.17.2+76-ge1f9cb16e2-1~deb12u1

    Update to 4.17.2+76-ge1f9cb16e2-1~deb12u1

  • xen Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.17.2+55-g0b56bed864-1

    Update to 4.17.2+55-g0b56bed864-1

  • xen Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.17.2+55-g0b56bed864-1

    Update to 4.17.2+55-g0b56bed864-1

  • xen Ubuntu:16.04:LTS

    Versions
    • 4.5.1-0ubuntu1
    • 4.5.1-0ubuntu2
    • 4.6.0-1ubuntu1
    • 4.6.0-1ubuntu2
    • 4.6.0-1ubuntu4
    • 4.6.0-1ubuntu4.1
    • 4.6.0-1ubuntu4.2
    • 4.6.0-1ubuntu4.3
    • 4.6.5-0ubuntu1
    • 4.6.5-0ubuntu1.1
    • 4.6.5-0ubuntu1.2
    • 4.6.5-0ubuntu1.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:18.04:LTS

    Versions
    • 4.9.0-0ubuntu3
    • 4.9.0-0ubuntu4
    • 4.9.2-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:20.04:LTS

    Versions
    • 4.9.2-0ubuntu2
    • 4.9.2-0ubuntu6
    • 4.9.2-0ubuntu7
    • 4.11.3+24-g14b62ab3e5-1ubuntu1
    • 4.11.3+24-g14b62ab3e5-1ubuntu2
    • 4.11.3+24-g14b62ab3e5-1ubuntu2.2
    • 4.11.3+24-g14b62ab3e5-1ubuntu2.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:22.04:LTS

    Versions
    • 4.11.4+24-gddaaccbbab-1ubuntu2
    • 4.16.0-1~ubuntu2
    • 4.16.0-1~ubuntu2.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:24.04:LTS

    Versions
    • 4.17.2-1
    • 4.17.2+55-g0b56bed864-1
    • 4.17.2+76-ge1f9cb16e2-1
    • 4.17.2+76-ge1f9cb16e2-1ubuntu1
    • 4.17.3+10-g091466ba55-1
    • 4.17.3+10-g091466ba55-1.1ubuntu2
    • 4.17.3+10-g091466ba55-1.1ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:25.10

    Versions
    • 4.20.0-1ubuntu1
    • 4.20.0+68-g35cb38b222-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:26.10

    Versions
    • 4.20.2+7-g1badcf5035-2build2
    • 4.20.2+37-g61ff35323e-1ubuntu1
    • 4.20.3+127-gc42374a105-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:26.04:LTS

    Versions
    • 4.20.0+68-g35cb38b222-1
    • 4.20.2+7-g1badcf5035-2
    • 4.20.2+7-g1badcf5035-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →