ALPINE-CVE-2024-21963: Medium severity alpine/xen vulnerability
An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and potentially cause a host crash leading to loss of availability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/xento a version that resolves this vulnerability.Fixed in 4.19.6-r4 - Upgrade
Upgrade
alpine/xento a version that resolves this vulnerability.Fixed in 4.20.4-r4 - Upgrade
Upgrade
alpine/xento a version that resolves this vulnerability.Fixed in 4.21.2-r4
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the affected Alpine Xen software are exposed where untrusted or malicious guest workloads can interact with the IOMMU. The described impact is on the host hypervisor rather than only within the guest.
What level of access does an attacker need?
An attacker needs low-level privileges in a guest. No user interaction is required, but exploitation has high attack complexity according to the provided vector.
What is the expected impact of successful exploitation?
A malicious guest may corrupt hypervisor pages and potentially crash the host. The stated impact is loss of availability; no confidentiality or integrity impact is indicated in the supplied severity vector.