CVE-2024-45817 x86: Deadlock in vlapic_error()
A guest can cause a deadlock in the Xen hypervisor by configuring an illegal APIC error interrupt vector, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-45817?
CVE-2024-45817 is a high-severity denial of service vulnerability in Xen Xen, published on 25 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs.
It is possible to configure the error interrupt with an illegal vector, which generates an error when an error interrupt is raised.
This case causes Xen to recurse through vlapic_error(). The recursion itself is bounded; errors accumulate in the the status register and only generate an interrupt when a new status bit becomes set.
However, the lock protecting this state in Xen will try to be taken recursively, and deadlock.
Weakness: CWE-209
Which versions are affected by CVE-2024-45817?
It affects 1 product.
Linux distribution packages (14)
xen SUSE:Linux Enterprise Micro 5.1 | All versions | 4.14.6_20-150300.3.81.1 |
xen SUSE:Linux Enterprise Micro 5.2 | All versions | 4.14.6_20-150300.3.81.1 |
xen SUSE:Linux Enterprise Micro 5.5 | All versions | 4.17.5_04-150500.3.39.1 |
xen SUSE:Linux Enterprise Module for Basesystem 15 SP5 | All versions | 4.17.5_04-150500.3.39.1 |
xen SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 4.18.3_04-150600.3.9.1 |
xen SUSE:Linux Enterprise Module for Server Applications 15 SP5 | All versions | 4.17.5_04-150500.3.39.1 |
xen SUSE:Linux Enterprise Module for Server Applications 15 SP6 | All versions | 4.18.3_04-150600.3.9.1 |
xen SUSE:Linux Enterprise Server 12 SP5 | All versions | 4.12.4_54-3.118.1 |
xen SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 4.12.4_54-3.118.1 |
xen SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 4.12.4_54-3.118.1 |
xen openSUSE:Leap 15.5 | All versions | 4.17.5_04-150500.3.39.1 |
xen openSUSE:Leap 15.6 | All versions | 4.18.3_04-150600.3.9.1 |
xen openSUSE:Leap Micro 5.5 | All versions | 4.17.5_04-150500.3.39.1 |
xen openSUSE:Tumbleweed | All versions | 4.19.0_04-1.1 |
Products include Xen Xen.
How do I fix CVE-2024-45817?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-45817 being exploited?
There is no known exploitation of CVE-2024-45817 in the wild and no public exploit code.
Other vulnerabilities in Xen Xen
Sources
Also known as ALPINE-CVE-2024-45817, DEBIAN-CVE-2024-45817, GHSA-x9f9-xjf3-f3v6, SUSE-SU-2024:3421-1, SUSE-SU-2024:3422-1, SUSE-SU-2024:3424-1 and 3 more.