CVE-2024-45817: x86: Deadlock in vlapic_error()
In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs.
It is possible to configure the error interrupt with an illegal vector, which generates an error when an error interrupt is raised.
This case causes Xen to recurse through vlapicerror(). The recursion itself is bounded; errors accumulate in the the status register and only generate an interrupt when a new status bit becomes set.
However, the lock protecting this state in Xen will try to be taken recursively, and deadlock.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45817?
CVE-2024-45817 has been classified as a critical severity vulnerability due to its potential impact on system stability and security.
How do I fix CVE-2024-45817?
To mitigate CVE-2024-45817, users should apply the latest patches provided by the Xen project or update to a secure version.
Which systems are affected by CVE-2024-45817?
CVE-2024-45817 affects systems running the Xen hypervisor, particularly those with misconfigured APIC error interrupts.
What type of vulnerability is CVE-2024-45817?
CVE-2024-45817 is an interrupt handling vulnerability that can lead to unauthorized access or system crashes.
Is there a workaround for CVE-2024-45817?
Currently, it is recommended to follow vendor guidance and apply patches as there are no documented workarounds for CVE-2024-45817.