XSA-360: ISSUE DESCRIPTION ================= A x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. IMPACT ====== HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case this would affect the entire host. VULNERABLE SYSTEMS ================== Xen versions 4.12.3, 4.12.4, and all versions from 4.13.1 onwards are vulnerable. Xen version 4.13.0 and all versions up to 4.12.2 are not affected. Only x86 systems running HVM guests with PCI pass through devices are vulnerable. Patch at $URL, please apply it if there's no release addressing this.
Please proceed with stabilization when ready, thanks!
Sanity check failed: > app-emulation/xen-4.14.1 > pdepend amd64 dev profile default/linux/amd64/17.0/x32 (2 total) > ~app-emulation/xen-tools-4.14.1 > pdepend amd64 stable profile default/linux/amd64/17.1 (14 total) > ~app-emulation/xen-tools-4.14.1
All sanity-check issues have been resolved
amd64 done all arches done
Not sure how I missed CCing maintainers... Please cleanup.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=307e92ec30fa21aafd600f9788a23d6cb759c357 commit 307e92ec30fa21aafd600f9788a23d6cb759c357 Author: Tomáš Mózes <hydrapolic@gmail.com> AuthorDate: 2021-02-04 19:08:56 +0000 Commit: Thomas Deutschmann <whissi@gentoo.org> CommitDate: 2021-02-04 22:23:39 +0000 app-emulation/xen: drop vulnerable Bug: https://bugs.gentoo.org/766474 Bug: https://bugs.gentoo.org/760144 Signed-off-by: Tomáš Mózes <hydrapolic@gmail.com> Signed-off-by: Thomas Deutschmann <whissi@gentoo.org> app-emulation/xen/Manifest | 4 - app-emulation/xen/xen-4.13.2-r2.ebuild | 165 --------------------------------- app-emulation/xen/xen-4.13.2-r3.ebuild | 165 --------------------------------- app-emulation/xen/xen-4.14.0-r7.ebuild | 165 --------------------------------- 4 files changed, 499 deletions(-)
GLSA request filed.
This issue was resolved and addressed in GLSA 202107-30 at https://security.gentoo.org/glsa/202107-30 by GLSA coordinator Sam James (sam_c).
