CVE-2022-23034: Integer Underflow

Published Jan 25, 2022
·
Updated

A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check.

Affected Software

5 affected componentsFixes available
debian/xen<=4.11.4+107-gef32c7afa2-1
4.14.6-14.14.5+94-ge49571868d-14.17.1+2-gb773c48e36-14.17.2+55-g0b56bed864-1
XEN Xen>=3.2.0<4.13.0
Fedoraproject Fedora=34
Debian Debian Linux=9.0
Debian Debian Linux=11.0

Event History

Jan 25, 2022
CVE Published
via MITRE·01:43 PM
Data Sourced
via MITRE·01:43 PM
DescriptionWeakness

Frequently Asked Questions

1

What is the severity of CVE-2022-23034?

CVE-2022-23034 is classified as a high severity vulnerability that allows a PV guest to cause denial of service on Xen.

2

How do I fix CVE-2022-23034?

To remediate CVE-2022-23034, update Xen to a fixed version starting from 4.14.6-1 or later.

3

Who is affected by CVE-2022-23034?

CVE-2022-23034 affects users of Xen with IOMMU enabled configurations, particularly those running affected Xen versions.

4

What systems are impacted by CVE-2022-23034?

The vulnerability impacts systems using specific versions of Xen on Debian and Fedora, including Debian 9.0, Debian 11.0, and Fedora 34.

5

What actions should I take if my systems are vulnerable to CVE-2022-23034?

If your systems are vulnerable to CVE-2022-23034, apply the necessary updates to mitigate the risk.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203