SB2020040413 - Race condition in xen (Alpine package)
Published: April 4, 2020
Security Bulletin ID
SB2020040413
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Race condition (CVE-ID: CVE-2019-17341)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a race condition when adding a passed-through PCI device to a domain after it was already started that results in the necessity to construct the IOMMU page tables on the fly therefore creating an attack window by allowing write access to the PV guests.
A local user can use a specially crafted application to perform write operations and alter such page tables without Xen auditing the changes that may result in execution of arbitrary code with hypervisor privileges.
Remediation
Install update from vendor's website.