Vulnerability · Published Jan 5, 2024 · Assigned by XEN
CVE-2023-34326x86/AMD: missing IOMMU TLB flushing
High 7.8
In plain English
A high-severity security flaw in Xen from Xen. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction (see stale DMA mappings) if some fields of the DTE are updated but the IOMMU TLB is not flushed. Such stale DMA mappings can point to memory ranges not owned by the guest, thus allowing access to unindented memory regions.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | xen | 4.17.2-r3 | ALPINE-CVE-2023-34326 |
| Alpine:v3.21 | xen | 4.17.2-r3 | ALPINE-CVE-2023-34326 |
| Alpine:v3.22 | xen | 4.17.2-r3 | ALPINE-CVE-2023-34326 |
| Alpine:v3.23 | xen | 4.17.2-r3 | ALPINE-CVE-2023-34326 |
| Alpine:v3.24 | xen | 4.17.2-r3 | ALPINE-CVE-2023-34326 |
| Debian:12 | xen | 4.17.2+76-ge1f9cb16e2-1~deb12u1 | DEBIAN-CVE-2023-34326 |
| Debian:13 | xen | 4.17.2+55-g0b56bed864-1 | DEBIAN-CVE-2023-34326 |
| Debian:14 | xen | 4.17.2+55-g0b56bed864-1 | DEBIAN-CVE-2023-34326 |
| Ubuntu:22.04:LTS | xen | no fix listed | UBUNTU-CVE-2023-34326 |
| Ubuntu:24.04:LTS | xen | no fix listed | UBUNTU-CVE-2023-34326 |
| Ubuntu:25.10 | xen | no fix listed | UBUNTU-CVE-2023-34326 |
| Ubuntu:26.04:LTS | xen | no fix listed | UBUNTU-CVE-2023-34326 |
| Ubuntu:26.10 | xen | no fix listed | UBUNTU-CVE-2023-34326 |
Affected products (as reported)
Weakness: CWE-672 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H