阿里云漏洞库

x86 HVM 超级调用可能会触发 Xen 错误检查 (CVE-2023-46842)

CVE编号

CVE-2023-46842

利用情况

暂无

补丁情况

N/A

披露时间

2024-05-16

漏洞描述

Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and

other modes. This in particular means that they may set registers used

to pass 32-bit-mode hypercall arguments to values outside of the range

32-bit code would be able to set them to.

When processing of hypercalls takes a considerable amount of time,

the hypervisor may choose to invoke a hypercall continuation. Doing so

involves putting (perhaps updated) hypercall arguments in respective

registers. For guests not running in 64-bit mode this further involves

a certain amount of translation of the values.

Unfortunately internal sanity checking of these translated values

assumes high halves of registers to always be clear when invoking a

hypercall. When this is found not to be the case, it triggers a

consistency check in the hypervisor and causes a crash.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://xenbits.xenproject.org/xsa/advisory-454.html

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	系统	alpine_3.16	xen	*		Up to (excluding) 4.16.6-r0
	运行在以下环境
	系统	alpine_3.17	xen	*		Up to (excluding) 4.16.6-r0
	运行在以下环境
	系统	alpine_3.18	xen	*		Up to (excluding) 4.17.4-r0
	运行在以下环境
	系统	alpine_3.19	xen	*		Up to (excluding) 4.18.2-r0
	运行在以下环境
	系统	debian_10	xen	*		Up to (excluding) 4.11.4+107-gef32c7afa2-1
	运行在以下环境
	系统	fedora_38	xen	*		Up to (excluding) 4.17.4-1.fc38
	运行在以下环境
	系统	fedora_39	xen	*		Up to (excluding) 4.17.4-1.fc39
	运行在以下环境
	系统	fedora_40	xen	*		Up to (excluding) 4.18.2-1.fc40
	运行在以下环境
	系统	opensuse_5.3	xen-libs	*		Up to (excluding) 4.16.6_02-150400.4.55.1
	运行在以下环境
	系统	opensuse_5.4	xen-libs	*		Up to (excluding) 4.16.6_02-150400.4.55.1
	运行在以下环境
	系统	opensuse_Leap_15.5	xen	*		Up to (excluding) 4.17.4_02-150500.3.30.1
	运行在以下环境
	系统	suse_12.sp5	xen	*		Up to (excluding) 4.12.4_48-3.109.1

攻击路径

N/A
攻击复杂度

N/A
权限要求

N/A
影响范围

N/A
用户交互

N/A
可用性

N/A
保密性

N/A
完整性

N/A

CWE-ID	漏洞类型