3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%
Arm provides multiple helpers to clean & invalidate the cache for a given
region. This is, for instance, used when allocating guest memory to ensure
any writes (such as the ones during scrubbing) have reached memory before
handing over the page to a guest. Unfortunately, the arithmetics in the
helpers can overflow and would then result to skip the cache
cleaning/invalidation. Therefore there is no guarantee when all the writes
will reach the memory.
Author | Note |
---|---|
mdeslaur | hypervisor packages are in universe. For issues in the hypervisor, add appropriate tags to each section, ex: Tags_xen: universe-binary |
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.0%