CVE-2023-46839

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context setup, but failure to setup the context is not fatal when the device is assigned. Not failing device assignment when such failure happens can lead to the primary device being assigned to a guest, while some of the phantom functions are assigned to a different domain.

• https://xenbits.xenproject.org/xsa/advisory-449.htmlPatch, Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-449.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/Mailing List, Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-449.htmlPatch, Vendor Advisory

Published

Mar 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46824Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-4683NULL Pointer Dereference in GitHub repository gpac/gpac prio…5.5
• CVE-2023-46835The current setup of the quarantine page tables assumes that…5.5
• CVE-2023-46836The fixes for XSA-422 (Branch Type Confusion) and XSA-434 (S…4.7
• CVE-2023-46837Arm provides multiple helpers to clean & invalidate the cach…3.3
• CVE-2023-46838Transmit requests in Xen's virtual network protocol can cons…7.5
• CVE-2023-46840Incorrect placement of a preprocessor directive in source co…4.1
• CVE-2023-46841Recent x86 CPUs offer functionality named Control-flow Enfor…6.5
• CVE-2023-46842Unlike 32-bit PV guests, HVM guests may switch freely betwee…6.5
• CVE-2023-46845EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to…7.2
• CVE-2023-46846SQUID is vulnerable to HTTP request smuggling, caused by chu…5.3
• CVE-2023-46847Squid is vulnerable to a Denial of Service, where a remote …7.5