CVE catalog

CVE-2024-45817

xen: CVE-2024-45817

[CVE catalog]

Severity
Medium · CVSS 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.54% · Oct 25, 2026

In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs. It is possible to configure the error interrupt with an illegal vector, which generates an error when an error interrupt is raised. This case causes Xen to recurse through vlapic_error(). The recursion itself is bounded; errors accumulate in the the status register and only generate an interrupt when a new status bit becomes set. However, the lock protecting this state in Xen will try to be taken recursively, and deadlock.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxensid4.20.4+39-gf1e1321c87-1fixed
Debianxenforky4.20.4+39-gf1e1321c87-1fixed
Debianxentrixie4.20.3+127-gc42374a105-0+deb13u1fixed
Debianxentrixie-security4.20.4+39-gf1e1321c87-0+deb13u1fixed
Debianxenbookworm4.17.5+72-g01140da4e8-1fixed
Debianxenbookworm-security4.17.7-0+deb12u1fixed
Alpinexen3.174.16.6-r2fixed
Alpinexen3.184.17.5-r1fixed
Alpinexen3.194.18.3-r0fixed
Alpinexen3.204.18.3-r0fixed
Alpinexen3.214.19.0-r0fixed
Alpinexen3.224.19.0-r0fixed
Alpinexen3.234.19.0-r0fixed
Alpinexen3.244.19.0-r0fixed
Susexenlinux enterprise software development kit 12 sp54.12.4_54-3.118.1fixed
Susexenlinux enterprise server 12 sp54.12.4_54-3.118.1fixed
Susexenlinux enterprise server for sap applications 12 sp54.12.4_54-3.118.1fixed
Susexenlinux enterprise micro 5.54.17.5_06-150500.3.42.1fixed
Susexenlinux enterprise module for basesystem 15 sp54.17.5_06-150500.3.42.1fixed
Susexenlinux enterprise module for server applications 15 sp54.17.5_06-150500.3.42.1fixed
Opensusexenleap micro 5.54.17.5_06-150500.3.42.1fixed
Opensusexenleap 15.54.17.5_06-150500.3.42.1fixed
Susexenlinux enterprise module for basesystem 15 sp64.18.3_06-150600.3.12.1fixed
Susexenlinux enterprise module for server applications 15 sp64.18.3_06-150600.3.12.1fixed
Opensusexenleap 15.64.18.3_06-150600.3.12.1fixed
Susexenlinux enterprise module for basesystem 15 sp64.18.3_04-150600.3.9.1fixed
Susexenlinux enterprise module for server applications 15 sp64.18.3_04-150600.3.9.1fixed
Opensusexenleap 15.64.18.3_04-150600.3.9.1fixed
Opensusexentumbleweed4.19.0_04-1.1fixed
Susexenlinux enterprise micro 5.14.14.6_20-150300.3.81.1fixed
Susexenlinux enterprise micro 5.24.14.6_20-150300.3.81.1fixed
Susexenlinux enterprise high performance computing 15 sp2-ltss4.13.5_16-150200.3.99.1fixed
Susexenlinux enterprise server 15 sp2-ltss4.13.5_16-150200.3.99.1fixed
Susexenlinux enterprise server for sap applications 15 sp24.13.5_16-150200.3.99.1fixed
Susexenlinux enterprise micro 5.54.17.5_04-150500.3.39.1fixed
Susexenlinux enterprise module for basesystem 15 sp54.17.5_04-150500.3.39.1fixed
Susexenlinux enterprise module for server applications 15 sp54.17.5_04-150500.3.39.1fixed
Opensusexenleap micro 5.54.17.5_04-150500.3.39.1fixed
Opensusexenleap 15.54.17.5_04-150500.3.39.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxensourcesid4.19.1-1not yet assignedNot reportedNot reported
Debianxensourceforky4.19.1-1not yet assignedNot reportedNot reported
Debianxensourcetrixie4.19.1-1not yet assignedNot reportedNot reported
Debianxensourcebookworm4.17.5+23-ga4e5191dc0-1not yet assignedNot reportedNot reported
Alpinexenapk3.174.16.6-r2Not reportedALPINE-CVE-2024-45817Not reported
Alpinexenapk3.184.17.5-r1Not reportedALPINE-CVE-2024-45817Not reported
Alpinexenapk3.194.18.3-r0Not reportedALPINE-CVE-2024-45817Not reported
Alpinexenapk3.204.18.3-r0Not reportedALPINE-CVE-2024-45817Not reported
Alpinexenapk3.214.19.0-r0Not reportedALPINE-CVE-2024-45817Not reported
Alpinexenapk3.224.19.0-r0Not reportedALPINE-CVE-2024-45817Not reported
Alpinexenapk3.234.19.0-r0Not reportedALPINE-CVE-2024-45817Not reported
Alpinexenapk3.244.19.0-r0Not reportedALPINE-CVE-2024-45817Not reported
Susexenrpmlinux enterprise software development kit 12 sp54.12.4_54-3.118.1Not reportedSUSE-SU-2024:3432-1Not reported
Susexenrpmlinux enterprise server 12 sp54.12.4_54-3.118.1Not reportedSUSE-SU-2024:3432-1Not reported
Susexenrpmlinux enterprise server for sap applications 12 sp54.12.4_54-3.118.1Not reportedSUSE-SU-2024:3432-1Not reported
Susexenrpmlinux enterprise micro 5.54.17.5_06-150500.3.42.1Not reportedSUSE-SU-2024:3980-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp54.17.5_06-150500.3.42.1Not reportedSUSE-SU-2024:3980-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp54.17.5_06-150500.3.42.1Not reportedSUSE-SU-2024:3980-1Not reported
Opensusexenrpmleap micro 5.54.17.5_06-150500.3.42.1Not reportedSUSE-SU-2024:3980-1Not reported
Opensusexenrpmleap 15.54.17.5_06-150500.3.42.1Not reportedSUSE-SU-2024:3980-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp64.18.3_06-150600.3.12.1Not reportedSUSE-SU-2024:4163-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp64.18.3_06-150600.3.12.1Not reportedSUSE-SU-2024:4163-1Not reported
Opensusexenrpmleap 15.64.18.3_06-150600.3.12.1Not reportedSUSE-SU-2024:4163-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp64.18.3_04-150600.3.9.1Not reportedSUSE-SU-2024:3424-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp64.18.3_04-150600.3.9.1Not reportedSUSE-SU-2024:3424-1Not reported
Opensusexenrpmleap 15.64.18.3_04-150600.3.9.1Not reportedSUSE-SU-2024:3424-1Not reported
Opensusexenrpmtumbleweed4.19.0_04-1.1Not reportedOPENSUSE-SU-2024:14377-1Not reported
Susexenrpmlinux enterprise micro 5.14.14.6_20-150300.3.81.1Not reportedSUSE-SU-2024:3422-1Not reported
Susexenrpmlinux enterprise micro 5.24.14.6_20-150300.3.81.1Not reportedSUSE-SU-2024:3422-1Not reported
Susexenrpmlinux enterprise high performance computing 15 sp2-ltss4.13.5_16-150200.3.99.1Not reportedSUSE-SU-2024:4073-1Not reported
Susexenrpmlinux enterprise server 15 sp2-ltss4.13.5_16-150200.3.99.1Not reportedSUSE-SU-2024:4073-1Not reported
Susexenrpmlinux enterprise server for sap applications 15 sp24.13.5_16-150200.3.99.1Not reportedSUSE-SU-2024:4073-1Not reported
Susexenrpmlinux enterprise micro 5.54.17.5_04-150500.3.39.1Not reportedSUSE-SU-2024:3421-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp54.17.5_04-150500.3.39.1Not reportedSUSE-SU-2024:3421-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp54.17.5_04-150500.3.39.1Not reportedSUSE-SU-2024:3421-1Not reported
Opensusexenrpmleap micro 5.54.17.5_04-150500.3.39.1Not reportedSUSE-SU-2024:3421-1Not reported
Opensusexenrpmleap 15.54.17.5_04-150500.3.39.1Not reportedSUSE-SU-2024:3421-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [xen-devel]Unknown

    Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.19.0_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-doc-html]Unknown

    Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.19.0_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-libs]Unknown

    Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.19.0_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • [xen-tools]Unknown

    Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.19.0_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.19.0_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

  • Source package: [xen]

    Details (1)
    • 4.22.0_02-2.1 · noarch · tumbleweed

      Unknown · Fixed: 4.19.0_04-1.1

      Version impact unknown

      dsa · xen · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • [libxen-dev]Fixed

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • [xen-doc]Fixed

    Source package: [xen]

    Details (4)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

  • Source package: [xen]

    Details (2)
    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.17.5+23-ga4e5191dc0-1

      dsa · xen · debian · bookworm; dsa · xen · debian · 12

Next results

Observed:

References