CVE catalog

CVE-2023-46842

xen: CVE-2023-46842

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
8.53% · Oct 27, 2026

Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a considerable amount of time, the hypervisor may choose to invoke a hypercall continuation. Doing so involves putting (perhaps updated) hypercall arguments in respective registers. For guests not running in 64-bit mode this further involves a certain amount of translation of the values. Unfortunately internal sanity checking of these translated values assumes high halves of registers to always be clear when invoking a hypercall. When this is found not to be the case, it triggers a consistency check in the hypervisor and causes a crash.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxensid4.20.4+39-gf1e1321c87-1fixed
Debianxenforky4.20.4+39-gf1e1321c87-1fixed
Debianxentrixie4.20.3+127-gc42374a105-0+deb13u1fixed
Debianxentrixie-security4.20.4+39-gf1e1321c87-0+deb13u1fixed
Debianxenbookworm4.17.5+72-g01140da4e8-1fixed
Debianxenbookworm-security4.17.7-0+deb12u1fixed
Alpinexen3.164.16.6-r0fixed
Alpinexen3.174.16.6-r0fixed
Alpinexen3.184.17.4-r0fixed
Alpinexen3.194.18.2-r0fixed
Alpinexen3.204.18.2-r0fixed
Alpinexen3.214.18.2-r0fixed
Alpinexen3.224.18.2-r0fixed
Alpinexen3.234.18.2-r0fixed
Alpinexen3.244.18.2-r0fixed
Susexenlinux enterprise module for basesystem 15 sp64.18.2_06-150600.3.3.1fixed
Susexenlinux enterprise module for server applications 15 sp64.18.2_06-150600.3.3.1fixed
Opensusexenleap 15.64.18.2_06-150600.3.3.1fixed
Susexenlinux enterprise micro 5.34.16.6_02-150400.4.55.1fixed
Susexenlinux enterprise micro 5.44.16.6_02-150400.4.55.1fixed
Opensusexenleap micro 5.34.16.6_02-150400.4.55.1fixed
Opensusexenleap micro 5.44.16.6_02-150400.4.55.1fixed
Susexenlinux enterprise software development kit 12 sp54.12.4_48-3.109.1fixed
Susexenlinux enterprise server 12 sp54.12.4_48-3.109.1fixed
Susexenlinux enterprise server for sap applications 12 sp54.12.4_48-3.109.1fixed
Susexenlinux enterprise micro 5.14.14.6_14-150300.3.72.1fixed
Susexenlinux enterprise micro 5.24.14.6_14-150300.3.72.1fixed
Opensusexentumbleweed4.18.2_02-1.1fixed
Susexenlinux enterprise micro 5.54.17.4_02-150500.3.30.1fixed
Susexenlinux enterprise module for basesystem 15 sp54.17.4_02-150500.3.30.1fixed
Susexenlinux enterprise module for server applications 15 sp54.17.4_02-150500.3.30.1fixed
Opensusexenleap 15.54.17.4_02-150500.3.30.1fixed
Susexenlinux enterprise micro 5.54.17.4_04-150500.3.33.1fixed
Susexenlinux enterprise module for basesystem 15 sp54.17.4_04-150500.3.33.1fixed
Susexenlinux enterprise module for server applications 15 sp54.17.4_04-150500.3.33.1fixed
Opensusexenleap micro 5.54.17.4_04-150500.3.33.1fixed
Opensusexenleap 15.54.17.4_04-150500.3.33.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxensourcesid4.19.1-1not yet assignedNot reportedNot reported
Debianxensourceforky4.19.1-1not yet assignedNot reportedNot reported
Debianxensourcetrixie4.19.1-1not yet assignedNot reportedNot reported
Debianxensourcebookworm4.17.5+23-ga4e5191dc0-1not yet assignedNot reportedNot reported
Alpinexenapk3.164.16.6-r0Not reportedALPINE-CVE-2023-46842Not reported
Alpinexenapk3.174.16.6-r0Not reportedALPINE-CVE-2023-46842Not reported
Alpinexenapk3.184.17.4-r0Not reportedALPINE-CVE-2023-46842Not reported
Alpinexenapk3.194.18.2-r0Not reportedALPINE-CVE-2023-46842Not reported
Alpinexenapk3.204.18.2-r0Not reportedALPINE-CVE-2023-46842Not reported
Alpinexenapk3.214.18.2-r0Not reportedALPINE-CVE-2023-46842Not reported
Alpinexenapk3.224.18.2-r0Not reportedALPINE-CVE-2023-46842Not reported
Alpinexenapk3.234.18.2-r0Not reportedALPINE-CVE-2023-46842Not reported
Alpinexenapk3.244.18.2-r0Not reportedALPINE-CVE-2023-46842Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp64.18.2_06-150600.3.3.1Not reportedSUSE-SU-2024:2531-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp64.18.2_06-150600.3.3.1Not reportedSUSE-SU-2024:2531-1Not reported
Opensusexenrpmleap 15.64.18.2_06-150600.3.3.1Not reportedSUSE-SU-2024:2531-1Not reported
Susexenrpmlinux enterprise micro 5.34.16.6_02-150400.4.55.1Not reportedSUSE-SU-2024:1259-1Not reported
Susexenrpmlinux enterprise micro 5.44.16.6_02-150400.4.55.1Not reportedSUSE-SU-2024:1259-1Not reported
Opensusexenrpmleap micro 5.34.16.6_02-150400.4.55.1Not reportedSUSE-SU-2024:1259-1Not reported
Opensusexenrpmleap micro 5.44.16.6_02-150400.4.55.1Not reportedSUSE-SU-2024:1259-1Not reported
Susexenrpmlinux enterprise software development kit 12 sp54.12.4_48-3.109.1Not reportedSUSE-SU-2024:1541-1Not reported
Susexenrpmlinux enterprise server 12 sp54.12.4_48-3.109.1Not reportedSUSE-SU-2024:1541-1Not reported
Susexenrpmlinux enterprise server for sap applications 12 sp54.12.4_48-3.109.1Not reportedSUSE-SU-2024:1541-1Not reported
Susexenrpmlinux enterprise micro 5.14.14.6_14-150300.3.72.1Not reportedSUSE-SU-2024:1540-1Not reported
Susexenrpmlinux enterprise micro 5.24.14.6_14-150300.3.72.1Not reportedSUSE-SU-2024:1540-1Not reported
Opensusexenrpmtumbleweed4.18.2_02-1.1Not reportedOPENSUSE-SU-2024:13853-1Not reported
Susexenrpmlinux enterprise micro 5.54.17.4_02-150500.3.30.1Not reportedSUSE-SU-2024:1295-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp54.17.4_02-150500.3.30.1Not reportedSUSE-SU-2024:1295-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp54.17.4_02-150500.3.30.1Not reportedSUSE-SU-2024:1295-1Not reported
Opensusexenrpmleap 15.54.17.4_02-150500.3.30.1Not reportedSUSE-SU-2024:1295-1Not reported
Susexenrpmlinux enterprise micro 5.54.17.4_04-150500.3.33.1Not reportedSUSE-SU-2024:2654-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp54.17.4_04-150500.3.33.1Not reportedSUSE-SU-2024:2654-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp54.17.4_04-150500.3.33.1Not reportedSUSE-SU-2024:2654-1Not reported
Opensusexenrpmleap micro 5.54.17.4_04-150500.3.33.1Not reportedSUSE-SU-2024:2654-1Not reported
Opensusexenrpmleap 15.54.17.4_04-150500.3.33.1Not reportedSUSE-SU-2024:2654-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [xen-devel]Unknown

    Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.18.2_02-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-doc-html]Unknown

    Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.18.2_02-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-libs]Unknown

    Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.18.2_02-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-tools]Unknown

    Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.18.2_02-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.18.2_02-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · noarch · tumbleweed

      Unknown · Fixed: 4.18.2_02-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • [libxen-dev]Fixed

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • [xen-doc]Fixed

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

Next results

Observed:

References