CVE-2022-23034
Medium
Description
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Xen
PublishedJan 25, 2022
First seenJan 25, 2022
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xen xen | 3.2.0 ≤ v < 4.13.0 | 4.13.0 |
| fedoraproject fedora | 34 | — |
| debian debian_linux | 9.0, 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.