Integer underflow in Xen - CVE-2022-23034
Published: May 30, 2022 / Updated: May 30, 2022
Vulnerability identifier: #VU63798
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-23034
CWE-ID: CWE-191
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user can perform a denial of service attack.
The vulnerability exists due to integer underflow when unmapping a grant to address XSA-380. A local user can request two forms of mappings to perform a denial of service attack.
Affected software
Xen
Debian Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
Fedora
xen-kmp-default
xen-kmp-pae
xen-debugsource
xen-libs
xen-tools-domU
xen
xen-doc-html
xen-libs-32bit
xen-tools
xen-debuginfo
xen-tools-domU-debuginfo
xen-tools-debuginfo
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-devel
xen-tools-xendomains-wait-disk
xen (Debian package)
Debian Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
Fedora
xen-kmp-default
xen-kmp-pae
xen-debugsource
xen-libs
xen-tools-domU
xen
xen-doc-html
xen-libs-32bit
xen-tools
xen-debuginfo
xen-tools-domU-debuginfo
xen-tools-debuginfo
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-devel
xen-tools-xendomains-wait-disk
xen (Debian package)
How to mitigate CVE-2022-23034
Install updates from vendor's website.
Xen - update to 4.14.4
xen-kmp-default - update to 4.4.4_52_3.0.101_108.132-61.70.1
xen-kmp-pae - update to 4.4.4_52_3.0.101_108.132-61.70.1
xen-debugsource - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-domU - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-doc-html - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-libs-32bit - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-tools - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-debuginfo - update to 4.4.4_52-61.70.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-devel - addressed in versions 4.10.4_32-3.71.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen - addressed in versions 4.14.3-4.fc34, 4.14.4-1.fc34, 4.15.1-5.fc35
xen (Debian package) - update to 4.14.4+74-gd7b22226b5-1
xen-kmp-default - update to 4.4.4_52_3.0.101_108.132-61.70.1
xen-kmp-pae - update to 4.4.4_52_3.0.101_108.132-61.70.1
xen-debugsource - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-domU - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-doc-html - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-libs-32bit - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-tools - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-debuginfo - update to 4.4.4_52-61.70.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-devel - addressed in versions 4.10.4_32-3.71.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen - addressed in versions 4.14.3-4.fc34, 4.14.4-1.fc34, 4.15.1-5.fc35
xen (Debian package) - update to 4.14.4+74-gd7b22226b5-1