Xen on AMD - debug extensions (DBEXT) exposure to guests: Companion to the other XSA-444 debug-extension issue on AMD.

CVSS 5.5CVE-2023-34328Kernel, userspace & hypervisorcurated

Impact

Companion to the other XSA-444 debug-extension issue on AMD. Guest-accessible debug state that is not correctly isolated across context switches.

Who can reach it

From inside a guest VM on AMD hardware under Xen.

What to do

Fixed in Xen (XSA-444). Hypervisor update plus host reboot; patch both XSA-444 CVEs together.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-34328 https://xenbits.xen.org/xsa/advisory-444.html

Related entries

Xen on AMD - debug extensions (DBEXT) exposure to guests: AMD CPUs since roughly 2014 carry extensions to x86 debuggingCVE-2023-34327 · Xen on AMD - debug extensions (DBEXT) exposure to guestsMedium
Arm Mali GPU kernel driver: Use-after-free via improper GPU memory processingCVE-2023-4211 · Arm Mali GPU kernel driverMedium
Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A race condition or locking defect in the amdkfd (KFDCVE-2023-52632 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)Medium
Linux kernel BPF verifier: stack bound arithmetic done in 32 bits could overflowCVE-2023-52676 · Linux kernel BPF verifier (stack bounds arithmetic in kernel/bpf/verifier.c)Medium
Linux kernel (net/tls): Sendfile() on a kTLS socket whose plaintext and ciphertext buffers are both empty drives theCVE-2023-52767 · Linux kernel (net/tls)Medium
Linux cpufreq/amd-pstate-ut - kernel panic when loading the unit-test driver: Loading the amd-pstate unit-test moduleCVE-2023-53563 · Linux cpufreq/amd-pstate-ut - kernel panic when loading the unit-test driverMedium

All Kernel, userspace & hypervisor entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.