CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing
First published: Tue Oct 10 2023(Updated: )
The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction (see stale DMA mappings) if some fields of the DTE are updated but the IOMMU TLB is not flushed. Such stale DMA mappings can point to memory ranges not owned by the guest, thus allowing access to unindented memory regions.
Credit: security@xen.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xen xen-unstable |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-34326?
CVE-2023-34326 has been classified as a high-severity vulnerability due to the potential for stale DMA mappings leading to device malfunctions.
How do I fix CVE-2023-34326?
To mitigate CVE-2023-34326, ensure that your system is updated according to the latest Xen security advisories and guidelines.
Which software is affected by CVE-2023-34326?
CVE-2023-34326 affects the Xen hypervisor, specifically the xen-unstable version.
What are stale DMA mappings in CVE-2023-34326?
Stale DMA mappings refer to outdated Direct Memory Access mappings that can cause devices to malfunction if not properly updated in accordance with IOMMU flushing.
Is there a workaround for CVE-2023-34326?
Currently, a specific workaround for CVE-2023-34326 is not mentioned, so following the official patches and updates is recommended.
- collector/oss-sec
- alias/CVE-2023-34326
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/severity
- agent/title
- agent/author
- agent/references
- agent/softwarecombine
- agent/description
- agent/trending
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/xen
- canonical/xen xen-unstable