CVE-2024-31146

When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective guests individually cannot really be guaranteed without knowing internals of any of the involved guests. Therefore such a configuration cannot really be security-supported, yet making that explicit was so far missing. Resources the sharing of which is known to be problematic include, but are not limited to - - PCI Base Address Registers (BARs) of multiple devices mapping to the same page (4k on x86), - - INTx lines.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 0.8 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://xenbits.xenproject.org/xsa/advisory-461.html	Patch Vendor Advisory
http://www.openwall.com/lists/oss-security/2024/08/14/3	Mailing List Third Party Advisory
http://xenbits.xen.org/xsa/advisory-461.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-09-25 11:15

Updated : 2026-01-05 18:46

NVD link : CVE-2024-31146

Mitre link : CVE-2024-31146

CVE.ORG link : CVE-2024-31146

JSON object : View

Products Affected

xen

xen

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2024-31146", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 0.8}]}, "published": "2024-09-25T11:15:12.220", "references": [{"url": "https://xenbits.xenproject.org/xsa/advisory-461.html", "tags": ["Patch", "Vendor Advisory"], "source": "security@xen.org"}, {"url": "http://www.openwall.com/lists/oss-security/2024/08/14/3", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://xenbits.xen.org/xsa/advisory-461.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "When multiple devices share resources and one of them is to be passed\nthrough to a guest, security of the entire system and of respective\nguests individually cannot really be guaranteed without knowing\ninternals of any of the involved guests. Therefore such a configuration\ncannot really be security-supported, yet making that explicit was so far\nmissing.\n\nResources the sharing of which is known to be problematic include, but\nare not limited to\n- - PCI Base Address Registers (BARs) of multiple devices mapping to the\n same page (4k on x86),\n- - INTx lines."}, {"lang": "es", "value": "Cuando varios dispositivos comparten recursos y uno de ellos debe pasarse a un invitado, la seguridad de todo el sistema y de los respectivos invitados individualmente no se puede garantizar realmente sin conocer los detalles internos de cualquiera de los invitados involucrados. Por lo tanto, una configuraci\u00f3n de este tipo no puede realmente ser compatible con la seguridad, aunque hasta ahora no se hab\u00eda hecho expl\u00edcita. Los recursos cuyo uso compartido se sabe que es problem\u00e1tico incluyen, entre otros: - Registros de direcci\u00f3n base PCI (BAR) de varios dispositivos que se asignan a la misma p\u00e1gina (4k en x86), - L\u00edneas INTx."}], "lastModified": "2026-01-05T18:46:00.983", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFA1950D-1D9F-4401-AA86-CF3028EFD286"}], "operator": "OR"}]}], "sourceIdentifier": "security@xen.org"}