Description
The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU consumption and possibly hypervisor or guest kernel panic) via a crafted GFN range.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | xen | 4.3.0-1 | — |
| Debian 13 | xen | 4.3.0-1 | — |
| Debian 12 | xen | 4.3.0-1 | — |
References
- GLSA-201504-04 vendor-advisory
- SUSE-SU-2014:0373 vendor-advisory
- [oss-security] 20130724 Xen Security Advisory 60 (CVE-2013-2212) - Excessive time to disable caching with HVM guests with PCI passthrough mailing-list
- SUSE-SU-2014:0372 vendor-advisory
- SUSE-SU-2014:0446 vendor-advisory