Arm provides multiple helpers to clean & invalidate the cache
for a given region. This is, for instance, used when allocating
guest memory to ensure any writes (such as the ones during scrubbing)
have reached memory before handing over the page to a guest.
Unfortunately, the arithmetics in the helpers can overflow and would
then result to skip the cache cleaning/invalidation. Therefore there
is no guarantee when all the writes will reach the memory.
This undefined behavior was meant to be addressed by XSA-437, but the
approach was not sufficient.
References
Configurations
History
21 Nov 2024, 08:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JFVKWYQFRUU3CAS53THTUKXEOUDWI42G/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/ - | |
| References | () https://xenbits.xenproject.org/xsa/advisory-447.html - Patch, Vendor Advisory |
15 Feb 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
11 Jan 2024, 17:08
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.3 |
| CPE | cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:* | |
| CWE | CWE-119 | |
| First Time |
Xen
Xen xen |
|
| References | () https://xenbits.xenproject.org/xsa/advisory-447.html - Patch, Vendor Advisory |
05 Jan 2024, 18:23
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-05 17:15
Updated : 2024-11-21 08:29
NVD link : CVE-2023-46837
Mitre link : CVE-2023-46837
CVE.ORG link : CVE-2023-46837
JSON object : View
Products Affected
xen
- xen
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer