CVE-2022-42320: High severity XEN Xen vulnerability
Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. When a domain is gone, there might be Xenstore nodes left with access rights containing the domid of the removed domain. This is normally no problem, as those access right entries will be corrected when such a node is written later. There is a small time window when a new domain is created, where the access rights of a past domain with the same domid as the new one will be regarded to be still valid, leading to the new domain being able to get access to a node which was meant to be accessible by the removed domain. For this to happen another domain needs to write the node before the newly created domain is being introduced to Xenstore by dom0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/xento a version that resolves this vulnerability.Fixed in 4.14.6-1Fixed in 4.14.5+94-ge49571868d-1Fixed in 4.17.1+2-gb773c48e36-1Fixed in 4.17.2+55-g0b56bed864-1
Event History
Frequently Asked Questions
What is CVE-2022-42320?
CVE-2022-42320 is a vulnerability in Xenstore that allows guests to access Xenstore nodes of deleted domains.
How severe is CVE-2022-42320?
CVE-2022-42320 has a severity value of 7 (high).
How can guests access Xenstore nodes of deleted domains?
Guests can access Xenstore nodes of deleted domains due to access rights containing the domid of the removed domain.
What versions of Xen are affected by CVE-2022-42320?
Xen versions 4.14.6-1, 4.14.5+94-ge49571868d-1, 4.17.1+2-gb773c48e36-1, and 4.17.2+55-g0b56bed864-1 are affected by CVE-2022-42320.
How can I fix CVE-2022-42320?
To fix CVE-2022-42320, update Xen to version 4.11.4+107-gef32c7afa2-1 or higher.