Skip to content
OpenAdvisories
Low · 3.3 CVE-2023-34321 EUVD-2023-38402GHSA-p5q9-hxvv-3rqq

arm32: The cache may not be properly cleaned/invalidated

Published Jan 5, 2024 · Updated Nov 4, 2025 · Assigned by XEN

Description

Arm provides multiple helpers to clean & invalidate the cache
for a given region. This is, for instance, used when allocating
guest memory to ensure any writes (such as the ones during scrubbing)
have reached memory before handing over the page to a guest.

Unfortunately, the arithmetics in the helpers can overflow and would
then result to skip the cache cleaning/invalidation. Therefore there
is no guarantee when all the writes will reach the memory.

Affected products

VendorProductAffectedFixed
Xen Xen — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 xen 4.17.2+55-g0b56bed864-1 —
Debian 13 xen 4.17.2+55-g0b56bed864-1 —
Debian 12 xen 4.17.2+76-ge1f9cb16e2-1~deb12u1 —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 xen No fix yet —
Ubuntu 26.04 LTS xen No fix yet —
Ubuntu 25.10 xen No fix yet —
Ubuntu 24.04 LTS xen No fix yet —
Ubuntu 22.04 LTS xen No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS xen No fix yet —
Ubuntu 18.04 LTS xen No fix yet —
Ubuntu 16.04 LTS xen No fix yet —
ReleasePackageFixed inAdvisory
Alpine v3.24 xen 4.17.2-r1 —
Alpine v3.23 xen 4.17.2-r1 —
Alpine v3.22 xen 4.17.2-r1 —
Alpine v3.21 xen 4.17.2-r1 —
Alpine v3.20 xen 4.17.2-r1 —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 xen 4.17.2-r1 —
Alpine v3.18 xen 4.17.2-r1 —
Alpine v3.17 xen 4.16.5-r1 —
Alpine v3.16 xen 4.16.5-r1 —
Alpine v3.15 xen 4.15.5-r1 —

Advisories 1

References