Xen on AMD-Vi - unity map handling: MULTI-TENANT ISOLATION: Second XSA-400 AMD-Vi unity-map issue

CVE-2022-26359Kernel, userspace & hypervisorcurated

Impact

MULTI-TENANT ISOLATION: Second XSA-400 AMD-Vi unity-map issue. Stale or incorrect IOMMU mappings across device assignment leave DMA windows open into memory the current device owner should not reach.

Who can reach it

Guest with an assigned device, particularly across reassignment.

What to do

Fixed in Xen (XSA-400). Hypervisor update plus reboot.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-26359 https://xenbits.xen.org/xsa/advisory-400.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.