Xen on AMD-Vi - unity map handling: MULTI-TENANT ISOLATION: Third XSA-400 AMD-Vi issue

CVE-2022-26360Kernel, userspace & hypervisorcurated

Impact

MULTI-TENANT ISOLATION: Third XSA-400 AMD-Vi issue. Same class - IOMMU mappings that outlive their justification give an assigned device cross-guest DMA reach.

Who can reach it

Guest with an assigned device.

What to do

Fixed in Xen (XSA-400). Hypervisor update plus reboot.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-26360 https://xenbits.xen.org/xsa/advisory-400.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.