CVEvulnerability
CVE-2023-34326
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-01-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-672
Description
The caching invalidation guidelines from the AMD-Vi specification (48882—Rev
3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction
(see stale DMA mappings) if some fields of the DTE are updated but the IOMMU
TLB is not flushed.
Such stale DMA mappings can point to memory ranges not owned by the guest, thus
allowing access to unindented memory regions.
Affected configurations
• xen xen
Related
Weakness · CWE (1)
- CWE-672 Operation on a Resource after Expiration or Release weakness
References
- https://xenbits.xenproject.org/xsa/advisory-442.html Vendor Advisory
- http://xenbits.xen.org/xsa/advisory-442.html xenbits.xen.org
- https://xenbits.xenproject.org/xsa/advisory-442.html Vendor Advisory