Skip to content
OpenAdvisories
Low · 3.3 CVE-2023-46837 EUVD-2023-51003GHSA-v75r-qqcp-59c7

arm32: The cache may not be properly cleaned/invalidated (take two)

Published Jan 5, 2024 · Updated Nov 4, 2025 · Assigned by XEN

Description

Arm provides multiple helpers to clean & invalidate the cache
for a given region. This is, for instance, used when allocating
guest memory to ensure any writes (such as the ones during scrubbing)
have reached memory before handing over the page to a guest.

Unfortunately, the arithmetics in the helpers can overflow and would
then result to skip the cache cleaning/invalidation. Therefore there
is no guarantee when all the writes will reach the memory.

This undefined behavior was meant to be addressed by XSA-437, but the
approach was not sufficient.

Affected products

VendorProductAffectedFixed
Xen Xen — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 xen 4.17.3+10-g091466ba55-1 —
Debian 13 xen 4.17.3+10-g091466ba55-1 —
Debian 12 xen 4.17.3+10-g091466ba55-1~deb12u1 —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 xen No fix yet —
Ubuntu 26.04 LTS xen No fix yet —
Ubuntu 25.10 xen No fix yet —
Ubuntu 24.04 LTS xen No fix yet —
Ubuntu 22.04 LTS xen No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS xen No fix yet —
Ubuntu 18.04 LTS xen No fix yet —
Ubuntu 16.04 LTS xen No fix yet —
ReleasePackageFixed inAdvisory
Alpine v3.24 xen 4.18.0-r2 —
Alpine v3.23 xen 4.18.0-r2 —
Alpine v3.22 xen 4.18.0-r2 —
Alpine v3.21 xen 4.18.0-r2 —
Alpine v3.20 xen 4.18.0-r2 —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 xen 4.18.0-r2 —
Alpine v3.18 xen 4.17.2-r5 —
Alpine v3.17 xen 4.16.5-r5 —
Alpine v3.16 xen 4.16.5-r5 —

Advisories 1

References