An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libxen-4.6", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "libxen-4.6-dbgsym", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "libxen-dev", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "libxenstore3.0", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "libxenstore3.0-dbgsym", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-utils-4.6", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-utils-4.6-dbgsym", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-utils-common", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xenstore-utils", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xenstore-utils-dbgsym", "binary_version": "4.6.5-0ubuntu1.4" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libxen-4.9", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "libxen-4.9-dbgsym", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "libxen-dev", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "libxenstore3.0", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "libxenstore3.0-dbgsym", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-utils-4.9", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-utils-4.9-dbgsym", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-utils-common", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xenstore-utils", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xenstore-utils-dbgsym", "binary_version": "4.9.2-0ubuntu1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxencall1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxencall1-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxendevicemodel1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxendevicemodel1-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxenevtchn1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxenevtchn1-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxenforeignmemory1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxenforeignmemory1-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxengnttab1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxengnttab1-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxenmisc4.11", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxenmisc4.11-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxenstore3.0", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxenstore3.0-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxentoolcore1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxentoolcore1-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxentoollog1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "libxentoollog1-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-doc", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-hypervisor-4.11-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-hypervisor-4.11-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-hypervisor-4.11-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-hypervisor-4.9-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-hypervisor-4.9-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-hypervisor-4.9-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-system-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-system-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-system-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-utils-4.11", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-utils-4.11-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-utils-common", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xen-utils-common-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xenstore-utils", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" }, { "binary_name": "xenstore-utils-dbgsym", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2" } ] }