CVE-2022-42327: High severity XEN Xen vulnerability
x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist between two guests.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2022-42327.
What is the severity of CVE-2022-42327?
The severity of CVE-2022-42327 is high, with a severity value of 7.1.
Which software is affected by CVE-2022-42327?
Xen Xen version 4.16, Fedora 36, and Fedora 37 are affected by CVE-2022-42327.
How can a guest read and write the global shared xAPIC page in Intel systems?
A guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode on Intel systems that support the "virtualize APIC accesses" feature.
How can the unintended memory sharing between guests be fixed?
To fix the unintended memory sharing between guests, it is recommended to apply the necessary updates provided by the respective vendors.