Deadlock in Xen - CVE-2024-45817
Published: September 24, 2024
Vulnerability identifier: #VU97680
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-45817
CWE-ID: CWE-833
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service attack (DoS) on the target system.
The vulnerability exists due to a deadlock within the vlapic_error() function. A buggy or malicious HVM or PVH guest can deadlock Xen and perform a denial of service attack.
Affected software
Xen
Citrix Hypervisor
PowerStore 9200T
PowerStore 500T
PowerStore 1000T
PowerStore 1200T
PowerStore 3000T
PowerStore 3200Q
PowerStore 3200T
PowerStore 5000T
PowerStore 5200T
PowerStore 7000T
PowerStore 9000T
PowerStoreT OS
Cloud Tiering Appliance
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP2
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
Server Applications Module
openSUSE Leap
Fedora
SmartFabric Manager
APEX Cloud Platform for Microsoft Azure
Citrix XenServer
xen-libs
xen-tools
xen-libs-32bit
xen-libs-debuginfo-32bit
xen-doc-html
xen-tools-debuginfo
xen
xen-tools-domU-debuginfo
xen-libs-debuginfo
xen-tools-domU
xen-devel
xen-debugsource
xen-tools-xendomains-wait-disk
xen-libs-64bit
xen-libs-64bit-debuginfo
xen-libs-32bit-debuginfo
xen (Debian package)
Citrix Hypervisor
PowerStore 9200T
PowerStore 500T
PowerStore 1000T
PowerStore 1200T
PowerStore 3000T
PowerStore 3200Q
PowerStore 3200T
PowerStore 5000T
PowerStore 5200T
PowerStore 7000T
PowerStore 9000T
PowerStoreT OS
Cloud Tiering Appliance
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Server 15 SP2
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
Server Applications Module
openSUSE Leap
Fedora
SmartFabric Manager
APEX Cloud Platform for Microsoft Azure
Citrix XenServer
xen-libs
xen-tools
xen-libs-32bit
xen-libs-debuginfo-32bit
xen-doc-html
xen-tools-debuginfo
xen
xen-tools-domU-debuginfo
xen-libs-debuginfo
xen-tools-domU
xen-devel
xen-debugsource
xen-tools-xendomains-wait-disk
xen-libs-64bit
xen-libs-64bit-debuginfo
xen-libs-32bit-debuginfo
xen (Debian package)
How to mitigate CVE-2024-45817
Install updates from vendor's website.
SmartFabric Manager - update to 1.2.0
APEX Cloud Platform for Microsoft Azure - update to 01.04.00.00
Citrix Hypervisor - update to XS82ECU1077
PowerStoreT OS - update to 4.0.1.3-2494147
xen-libs - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-32bit - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-debuginfo-32bit - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1
xen-doc-html - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools-debuginfo - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools-domU-debuginfo - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-debuginfo - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools-domU - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-devel - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-debugsource - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-64bit - addressed in versions 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-64bit-debuginfo - addressed in versions 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen - addressed in versions 4.17.5-2.fc39, 4.18.3-2.fc40, 4.19.0-4.fc41
xen (Debian package) - update to 4.17.5+23-ga4e5191dc0-1
Cloud Tiering Appliance - update to 13.2.0.2.33
APEX Cloud Platform for Microsoft Azure - update to 01.04.00.00
Citrix Hypervisor - update to XS82ECU1077
PowerStoreT OS - update to 4.0.1.3-2494147
xen-libs - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-32bit - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-debuginfo-32bit - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1
xen-doc-html - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools-debuginfo - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools-domU-debuginfo - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-debuginfo - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools-domU - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-devel - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-debugsource - addressed in versions 4.12.4_54-3.118.1, 4.12.4_56-3.121.1, 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.5_16-150200.3.99.1, 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-64bit - addressed in versions 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-64bit-debuginfo - addressed in versions 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.6_20-150300.3.81.1, 4.16.6_04-150400.4.62.1, 4.17.5_04-150500.3.39.1, 4.17.5_06-150500.3.42.1, 4.18.3_04-150600.3.9.1, 4.18.3_06-150600.3.12.1
xen - addressed in versions 4.17.5-2.fc39, 4.18.3-2.fc40, 4.19.0-4.fc41
xen (Debian package) - update to 4.17.5+23-ga4e5191dc0-1
Cloud Tiering Appliance - update to 13.2.0.2.33
External References
Related Security Bulletins
- Denial of service in Xen APIC
- Multiple vulnerabilities in XenServer and Citrix Hypervisor
- SUSE update for xen
- SUSE update for xen
- SUSE update for xen
- SUSE update for xen
- Fedora 41 update for xen
- Fedora 40 update for xen
- Fedora 39 update for xen
- SUSE update for xen
- SUSE update for xen
- SUSE update for xen
- SUSE update for xen
- SUSE update for xen
- Debian update for xen
- Dell SmartFabric Manager update for third-party components
- APEX Cloud Platform for Microsoft Azure update for third-party components
- Dell Cloud Tiering Appliance/VE update for third-party components
- Multiple vulnerabilities in Dell PowerStoreT OS