vulnerability

Ubuntu: (Multiple Advisories) (CVE-2020-11743): Xen vulnerabilities

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:P)
Published
Apr 14, 2020
Added
Sep 20, 2022
Modified
Aug 18, 2025

Description

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success, and proceeds with incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to map a grant, it hits the incorrect error path. This will crash a Linux based dom0 or backend domain.

Solutions

ubuntu-upgrade-libxendevicemodel1ubuntu-upgrade-libxenevtchn1ubuntu-upgrade-libxengnttab1ubuntu-upgrade-libxenmisc4-11ubuntu-upgrade-xen-hypervisor-4-11-amd64ubuntu-upgrade-xen-hypervisor-4-11-arm64ubuntu-upgrade-xen-hypervisor-4-11-armhfubuntu-upgrade-xen-utils-4-11ubuntu-upgrade-xen-utils-commonubuntu-upgrade-xenstore-utils

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.