Misassignment Of Phantom Functions

2024-02-0616:43:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

xen

vulnerability

iommu

setup

phantom functions

primary device

attackers

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

JSON

xen is vulnerable to Misassignment of Phantom Functions. The vulnerability is due to the failure to properly handle the assignment of phantom functions when the IOMMU context setup fails. It allows attackers in the primary device being assigned to a guest while some phantom functions are assigned to a different domain.

CPENameOperatorVersion
xen:3.16eq4.16.4-r0
xen:3.16eq4.16.5-r2
xen:3.16eq4.16.3-r0
xen:3.16eq4.16.4-r1
xen:3.16eq4.16.1-r2
xen:3.16eq4.16.5-r3
xen:3.16eq4.16.4-r3
xen:3.16eq4.16.5-r0
xen:3.16eq4.16.5-r1
xen:3.16eq4.16.1-r3

Name	Operator	Version
xen:3.16	eq	4.16.4-r0
xen:3.16	eq	4.16.5-r2
xen:3.16	eq	4.16.3-r0
xen:3.16	eq	4.16.4-r1
xen:3.16	eq	4.16.1-r2
xen:3.16	eq	4.16.5-r3
xen:3.16	eq	4.16.4-r3
xen:3.16	eq	4.16.5-r0
xen:3.16	eq	4.16.5-r1
xen:3.16	eq	4.16.1-r3