CVE-2023-34326
Published: 05 January 2024
Summary
CVE-2023-34326 is a high-severity Operation on a Resource after Expiration or Release (CWE-672) vulnerability in Xen Xen. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 27.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-38407
Vulnerability details
The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction (see stale DMA mappings) if some fields of the DTE are updated but the IOMMU TLB is not flushed. Such…
more
stale DMA mappings can point to memory ranges not owned by the guest, thus allowing access to unindented memory regions.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.