CVE-2023-46835

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description The issue arises from a mismatch in the IOMMU quarantine page table levels. On systems with no RAM above the 512GB mark, only 3 page-table levels are configured in the IOMMU, while the quarantine domain is initialized with 4 page table levels. This results in a device in quarantine mode gaining write access to the page destined to be a PDE, potentially leading to data leaks. The sink page the device gets read/write access to is no longer cleared between device assignment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.