pci：分配给不正确上下文的幻像函数 (CVE-2023-46839)

CVE编号

CVE-2023-46839

利用情况

暂无

补丁情况

N/A

披露时间

2024-03-20

漏洞描述

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context setup, but failure to setup the context is not fatal when the device is assigned. Not failing device assignment when such failure happens can lead to the primary device being assigned to a guest, while some of the phantom functions are assigned to a different domain.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://xenbits.xenproject.org/xsa/advisory-449.html

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	系统	alpine_3.16	xen	*		Up to (excluding) 4.16.5-r6
	运行在以下环境
	系统	alpine_3.17	xen	*		Up to (excluding) 4.16.5-r6
	运行在以下环境
	系统	alpine_3.18	xen	*		Up to (excluding) 4.17.3-r0
	运行在以下环境
	系统	alpine_3.19	xen	*		Up to (excluding) 4.18.0-r3
	运行在以下环境
	系统	debian_12	xen	*		Up to (excluding) 4.17.3+10-g091466ba55-1~deb12u1
	运行在以下环境
	系统	fedora_38	xen	*		Up to (excluding) 4.17.2-6.fc38
	运行在以下环境
	系统	fedora_39	xen	*		Up to (excluding) 4.17.2-6.fc39
	运行在以下环境
	系统	opensuse_5.3	xen-libs	*		Up to (excluding) 4.16.5_12-150400.4.46.1
	运行在以下环境
	系统	opensuse_5.4	xen-libs	*		Up to (excluding) 4.16.5_12-150400.4.46.1
	运行在以下环境
	系统	opensuse_Leap_15.5	xen	*		Up to (excluding) 4.17.3_04-150500.3.21.1
	运行在以下环境
	系统	suse_12_SP5	xen	*		Up to (excluding) 4.12.4_44-3.103.1

CVSS3评分 N/A

• 攻击路径 N/A
• 攻击复杂度 N/A
• 权限要求 N/A
• 影响范围 N/A
• 用户交互 N/A
• 可用性 N/A
• 保密性 N/A
• 完整性 N/A

N/A

CWE-ID	漏洞类型

Exp相关链接

- avd.aliyun.com