p PatchFirst

CVE-2023-46842

CVE-2023-46842 · x86 HVM hypercalls may trigger Xen bug check

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a considerable amount of time, the hypervisor may choose to invoke a hypercall continuation. Doing so involves putting (perhaps updated) hypercall arguments in respective registers. For guests not running in 64-bit mode this further involves a certain amount of translation of the values. Unfortunately internal sanity checking of these translated values assumes high halves of registers to always be clear when invoking a hypercall. When this is found not to be the case, it triggers a consistency check in the hypervisor and causes a crash.

CVSS 6.5 · Medium · EPSS 8.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • xen

    Versions
    • consult Xen advisory XSA-454: Unknown

    No fix published

  • xen Debian:12

    Versions
    • 4.17.1+2-gb773c48e36-1
    • 4.17.2+55-g0b56bed864-1
    • 4.17.2+76-ge1f9cb16e2-1
    • 4.17.2+76-ge1f9cb16e2-1~deb12u1
    • 4.17.2-1
    • 4.17.3+10-g091466ba55-1
    • 4.17.3+10-g091466ba55-1.1
    • 4.17.3+10-g091466ba55-1.1~exp1
    • 4.17.3+10-g091466ba55-1.1~exp2
    • 4.17.3+10-g091466ba55-1~deb12u1
    • 4.17.3+36-g54dacb5c02-1
    Affected ranges
    • ECOSYSTEM: < 4.17.5+23-ga4e5191dc0-1

    Update to 4.17.5+23-ga4e5191dc0-1

  • xen Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.19.1-1

    Update to 4.19.1-1

  • xen Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.19.1-1

    Update to 4.19.1-1

  • xen Ubuntu:16.04:LTS

    Versions
    • 4.5.1-0ubuntu1
    • 4.5.1-0ubuntu2
    • 4.6.0-1ubuntu1
    • 4.6.0-1ubuntu2
    • 4.6.0-1ubuntu4
    • 4.6.0-1ubuntu4.1
    • 4.6.0-1ubuntu4.2
    • 4.6.0-1ubuntu4.3
    • 4.6.5-0ubuntu1
    • 4.6.5-0ubuntu1.1
    • 4.6.5-0ubuntu1.2
    • 4.6.5-0ubuntu1.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:18.04:LTS

    Versions
    • 4.9.0-0ubuntu3
    • 4.9.0-0ubuntu4
    • 4.9.2-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:20.04:LTS

    Versions
    • 4.9.2-0ubuntu2
    • 4.9.2-0ubuntu6
    • 4.9.2-0ubuntu7
    • 4.11.3+24-g14b62ab3e5-1ubuntu1
    • 4.11.3+24-g14b62ab3e5-1ubuntu2
    • 4.11.3+24-g14b62ab3e5-1ubuntu2.2
    • 4.11.3+24-g14b62ab3e5-1ubuntu2.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:22.04:LTS

    Versions
    • 4.11.4+24-gddaaccbbab-1ubuntu2
    • 4.16.0-1~ubuntu2
    • 4.16.0-1~ubuntu2.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:24.04:LTS

    Versions
    • 4.17.2-1
    • 4.17.2+55-g0b56bed864-1
    • 4.17.2+76-ge1f9cb16e2-1
    • 4.17.2+76-ge1f9cb16e2-1ubuntu1
    • 4.17.3+10-g091466ba55-1
    • 4.17.3+10-g091466ba55-1.1ubuntu2
    • 4.17.3+10-g091466ba55-1.1ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:25.10

    Versions
    • 4.20.0-1ubuntu1
    • 4.20.0+68-g35cb38b222-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:26.10

    Versions
    • 4.20.2+7-g1badcf5035-2build2
    • 4.20.2+37-g61ff35323e-1ubuntu1
    • 4.20.3+127-gc42374a105-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xen Ubuntu:26.04:LTS

    Versions
    • 4.20.0+68-g35cb38b222-1
    • 4.20.2+7-g1badcf5035-2
    • 4.20.2+7-g1badcf5035-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →