Resource exhaustion in Xen - CVE-2022-26360

Vulnerability identifier: #VU63441

CSH Severity: Low

CVSS v4: 8.2 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H]

CVE-ID: CVE-2022-26360

CWE-ID: CWE-400

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Xen
Debian Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
xen
xen-debugsource
xen-doc-html
xen-libs-32bit
xen-libs
xen-libs-debuginfo-32bit
xen-libs-debuginfo
xen-tools
xen-tools-debuginfo
xen-tools-domU-debuginfo
xen-tools-domU
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
xen (Debian package)

Install updates from vendor's website.

xen - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-debugsource - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-doc-html - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.12.4_22-3.66.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-libs-32bit - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.12.4_22-3.66.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-libs - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.12.4_22-3.66.1
xen-libs-debuginfo - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-tools - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-tools-debuginfo - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-tools-domU - addressed in versions 4.7.6_22-43.88.1, 4.9.4_28-3.103.1, 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-devel - addressed in versions 4.10.4_34-150000.3.74.1, 4.12.4_22-3.66.1, 4.12.4_24-150100.3.72.1, 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_08-150200.3.50.1, 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen - addressed in versions 4.14.4-3.fc34, 4.14.5-1.fc34, 4.15.2-3.fc35, 4.16.0-6.fc36, 4.16.1-1.fc36
xen-libs-32bit-debuginfo - addressed in versions 4.14.4_04-150300.3.24.1, 4.14.5_02-150300.3.29.1
xen (Debian package) - update to 4.14.4+74-gd7b22226b5-1

• https://xenbits.xenproject.org/xsa/advisory-400.txt
• http://xenbits.xen.org/xsa/advisory-400.html
• http://www.openwall.com/lists/oss-security/2022/04/05/3
• https://www.debian.org/security/2022/dsa-5117
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/

• SUSE update for xen
• SUSE update for xen
• Debian update for xen
• SUSE update for xen
• SUSE update for xen
• SUSE update for xen
• SUSE update for xen
• SUSE update for xen
• SUSE update for xen
• Fedora 35 update for xen
• Fedora 34 update for xen
• Fedora 36 update for xen
• Fedora 36 update for xen
• Fedora 34 update for xen
• Multiple vulnerabilities in Xen IOMMU