Xen (libfsimage/pygrub): Multiple vulnerabilities in libfsimage disk handling

Impact

Multiple vulnerabilities in libfsimage disk handling - a hostile guest disk image compromises the toolstack in dom0

Who can reach it

Tenant-supplied disk image

What to do

Patch libfsimage and run pygrub de-privileged (see also XSA-508); toolstack restart, no full host reboot

References

Related entries

• Linux kernel (nf_tables): Stack out-of-bounds read/write in nft_byteorder_eval() - local root (Pwn2Own)CVE-2023-35001 · Linux kernel (nf_tables)High
• Linux kernel (netfilter pipapo): UAF from improper element removal in nft_pipapo_remove() - local rootCVE-2023-4004 · Linux kernel (netfilter pipapo)High
• Linux kernel (nf_tables): UAF adding a rule with NFTA_RULE_CHAIN_ID - local rootCVE-2023-4147 · Linux kernel (nf_tables)High
• Linux kernel (net/sched hfsc): Use-after-free in sch_hfsc qdisc - local rootCVE-2023-4623 · Linux kernel (net/sched hfsc)High
• glibc (ld.so): Looney Tunables: buffer overflow in the ld.so GLIBC_TUNABLES parser - local root on default installsCVE-2023-4911 · glibc (ld.so)High
• Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): Missing or insufficient validation of user-suppliedCVE-2023-52678 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)High