Incomplete cleanup in Xen - CVE-2022-23035
Published: May 30, 2022 / Updated: May 30, 2022
Vulnerability identifier: #VU63800
CSH Severity: Low
CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-23035
CWE-ID: CWE-459
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to escalate privileges on the system.
The vulnerability exists due to insufficient cleanup of passed-through device IRQs. An attacker with physical access can cause a Denial of Service (DoS) and escalate privileges on the system.
Affected software
Xen
Debian Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
Fedora
xen-kmp-default
xen-kmp-pae
xen-debugsource
xen-libs
xen-tools-domU
xen
xen-doc-html
xen-libs-32bit
xen-tools
xen-debuginfo
xen-tools-domU-debuginfo
xen-tools-debuginfo
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-devel
xen-tools-xendomains-wait-disk
xen (Debian package)
Debian Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
Fedora
xen-kmp-default
xen-kmp-pae
xen-debugsource
xen-libs
xen-tools-domU
xen
xen-doc-html
xen-libs-32bit
xen-tools
xen-debuginfo
xen-tools-domU-debuginfo
xen-tools-debuginfo
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-devel
xen-tools-xendomains-wait-disk
xen (Debian package)
How to mitigate CVE-2022-23035
Install updates from vendor's website.
Xen - update to 4.14.4
xen-kmp-default - update to 4.4.4_52_3.0.101_108.132-61.70.1
xen-kmp-pae - update to 4.4.4_52_3.0.101_108.132-61.70.1
xen-debugsource - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-domU - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-doc-html - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-libs-32bit - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-tools - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-debuginfo - update to 4.4.4_52-61.70.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-devel - addressed in versions 4.10.4_32-3.71.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen - addressed in versions 4.14.3-4.fc34, 4.14.4-1.fc34, 4.15.1-5.fc35
xen (Debian package) - update to 4.14.4+74-gd7b22226b5-1
xen-kmp-default - update to 4.4.4_52_3.0.101_108.132-61.70.1
xen-kmp-pae - update to 4.4.4_52_3.0.101_108.132-61.70.1
xen-debugsource - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-domU - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-doc-html - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-libs-32bit - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-tools - addressed in versions 4.4.4_52-61.70.1, 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-debuginfo - update to 4.4.4_52-61.70.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs-debuginfo - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.10.4_32-3.71.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_20-43.85.1, 4.9.4_26-3.100.1, 4.11.4_26-2.68.1, 4.12.4_18-3.58.2
xen-devel - addressed in versions 4.10.4_32-3.71.1, 4.12.4_18-3.58.2, 4.12.4_18-3.60.2, 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_04-3.43.2, 4.14.3_06-150300.3.18.2
xen - addressed in versions 4.14.3-4.fc34, 4.14.4-1.fc34, 4.15.1-5.fc35
xen (Debian package) - update to 4.14.4+74-gd7b22226b5-1