CVE-2022-23034

Description

A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.

How to fix CVE-2022-23034

To remediate CVE-2022-23034, upgrade the affected package to a fixed version below.

• —upgrade to 4.13.4-r3 or later
• —upgrade to 4.14.4+74-gd7b22226b5-1 or later

Is CVE-2022-23034 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 4.13.4-r3
• from 0, < 4.14.4+74-gd7b22226b5-1

CVSS scores

References (2)

• ADVISORYsecurity.alpinelinux.org/vuln/CVE-2022-23034
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2022-23034