Detections
Analytics
Alpine: xen: security update to 4.16.6-r3
medium Tenable Cloud Security Plugin ID 408549
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the (virtual) VGA is
in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the
return from the function that acquired it. This behavior results in a problem when emulating an
instruction with two memory accesses, both of which touch VGA memory (plus some further constraints which
aren't relevant here). When emulating the 2nd access, the lock that is already being held would be
attempted to be re-acquired, resulting in a deadlock. This deadlock was already found when the code was
first introduced, but was analysed incorrectly and the fix was incomplete. Analysis in light of the new
finding cannot find a way to make the existing locking discipline work. In staging, this logic has all
been removed because it was discovered to be accidentally disabled since Xen 4.7. Therefore, we are fixing
the locking problem by backporting the removal of most of the feature. Note that even with the feature
disabled, the lock would still be acquired for any accesses to the VGA MMIO region. (CVE-2024-45818)
- PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the
tables in local memory, which are then copied into guest memory. While actually used parts of the local
memory are filled in correctly, excess space that is being allocated is left with its prior contents.
(CVE-2024-45819)
See Also
Plugin Details
Severity: Medium
ID: 408549
Version: Revision 1.12
Type: Local
Published: 11/13/2024
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3.3
Percentile: 51.16
CVSS v2
Risk Factor: Medium
Base Score: 4.6
Temporal Score: 3.4
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:N
CVSS Score Source: CVE-2024-45819
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS Score Source: CVE-2024-45818
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 12/19/2024
Reference Information
CVE: CVE-2024-45818, CVE-2024-45819
IAVB: 2024-B-0095-S