CVE-2018-19965

Technical details about CVE-2018-19965 (Xen) are not provided in the connected documents. The initial description lacks vendor/product/version/root-cause/fix specifics. Monitor for updates from Xen advisories.

CVE-2018-19965

An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service host OS crash because GP0 can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 aka Meltdown mitigation...

insufficient TLB flushing / improper large page mappings with AMD IOMMUs

ISSUE DESCRIPTION In order to be certain that no undue access to memory is possible anymore after IOMMU mappings of this memory have been removed, Translation Lookaside Buffers TLBs need to be flushed after most changes to such mappings. Xen bypassed certain IOMMU flushes on AMD x86 hardware...

Citrix XenServer Security Update

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that have deployment-dependent impacts. These issues affect the following supported versions of Citrix XenServer: Citrix XenServer 7.6 Citrix XenServer 7.5 Citrix XenServer 7.1 LTSR CU1 Citrix...

Debian Security Advisory DSA 3503-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, information leak or data loss. CVE-2013-4312 Tetsuo Handa discovered that users can use pipes queued on local Unix sockets to allocate an unfair share of kernel memory,...

Fedora 19 : xen-4.2.3-12.fc19 (2013-23457)

IOMMU TLB flushing may be inadvertently suppressed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 20 : xen-4.3.1-6.fc20 (2013-23251)

Disaggregated domain management security status update, IOMMU TLB flushing may be inadvertently suppressed Lock order reversal between pagealloclock and mmrwlock, Hypercalls exposed to privilege rings 1 and 2 of HVM guests Insufficient TLB flushing in VT-d iommu code Note that Tenable Network...

SuSE 11.3 Security Update : Xen (SAT Patch Number 8588)

The Xen hypervisor and tool-suite have been updated to fix security issues and bugs : - XSA-73: A lock order reversal between page allocation and grant table locks could lead to host crashes or even host code execution. CVE-2013-4494 - XSA-74: A lock order reversal between pagealloclock and...

Fedora 19 : xen-4.2.3-10.fc19 (2013-22325)

Lock order reversal between pagealloclock and mmrwlock, Hypercalls exposed to privilege rings 1 and 2 of HVM guests, Insufficient TLB flushing in VT-d iommu code Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable ha...

Fedora 18 : xen-4.2.3-10.fc18 (2013-22312)

Lock order reversal between pagealloclock and mmrwlock, Hypercalls exposed to privilege rings 1 and 2 of HVM guests, Insufficient TLB flushing in VT-d iommu code Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable ha...

Insufficient TLB flushing in VT-d (iommu) code

ISSUE DESCRIPTION An inverted boolean parameter resulted in TLB flushes not happening upon clearing of a present translation table entry. Retaining stale TLB entries could allow guests access to memory that ought to have been revoked, or grant greater access than intended. IMPACT Malicious guest...