Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-34321
HistoryJan 05, 2024 - 12:00 a.m.

CVE-2023-34321

2024-01-0500:00:00
ubuntu.com
ubuntu.com
7
arm
cache cleaning
invalidation
guest memory
arithmetic overflow
memory guarantee

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Arm provides multiple helpers to clean & invalidate the cache for a given
region. This is, for instance, used when allocating guest memory to ensure
any writes (such as the ones during scrubbing) have reached memory before
handing over the page to a guest. Unfortunately, the arithmetics in the
helpers can overflow and would then result to skip the cache
cleaning/invalidation. Therefore there is no guarantee when all the writes
will reach the memory.

Notes

Author Note
mdeslaur hypervisor packages are in universe. For issues in the hypervisor, add appropriate tags to each section, ex: Tags_xen: universe-binary

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%