CVE-2023-34322

For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. Since Xen itself needs to be mapped when PV guests run, Xen and shadowed PV guests run directly the respective shadow page tables. For 64-bit PV guests this means running on the shadow of the guest root page table. In the course of dealing with shortage of memory in the shadow pool associated with a domain, shadows of page tables may be torn down. This tearing down may include the shadow root page table that the CPU in question is presently running on. While a precaution exists to supposedly prevent the tearing down of the underlying live page table, the time window covered by that precaution isn't large enough.

• CWE-273
• CWE-273

• https://xenbits.xenproject.org/xsa/advisory-438.htmlVendor Advisory
• http://xenbits.xen.org/xsa/advisory-438.html
• https://xenbits.xenproject.org/xsa/advisory-438.htmlVendor Advisory

Published

Jan 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34317An improper input validation vulnerability exists in the OAS…6.5
• CVE-2023-34318A heap buffer overflow vulnerability was found in sox, in th…7.8
• CVE-2023-34319The fix for XSA-423 added logic to Linux'es netback driver t…7.8
• CVE-2023-3432Server-Side Request Forgery (SSRF) in GitHub repository plan…10
• CVE-2023-34320Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 150…5.5
• CVE-2023-34321Arm provides multiple helpers to clean & invalidate the cach…3.3
• CVE-2023-34323When a transaction is committed, C Xenstored will first chec…5.5
• CVE-2023-34324Closing of an event channel in the Linux kernel can result i…4.9
• CVE-2023-34325 [This CNA information record relates to multiple CVEs; the …7.8
• CVE-2023-34326The caching invalidation guidelines from the AMD-Vi specific…7.8
• CVE-2023-34327 [This CNA information record relates to multiple CVEs; the …5.5
• CVE-2023-34328 [This CNA information record relates to multiple CVEs; the …5.5