rm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes (such as the ones during scrubbing) have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the helpers can overflow and would then result to skip the cache cleaning/invalidation. Therefore there is no guarantee when all the writes will reach the memory. This undefined behavior was meant to be addressed by XSA-437, but the approach was not sufficient.
04 Nov 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Feb 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes (such as the ones during scrubbing) have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the helpers can overflow and would then result to skip the cache cleaning/invalidation. Therefore there is no guarantee when all the writes will reach the memory. This undefined behavior was meant to be addressed by XSA-437, but the approach was not sufficient. |
21 Nov 2024, 08:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.fedoraproject.org/archives/list/[email protected]/message/JFVKWYQFRUU3CAS53THTUKXEOUDWI42G/ - | |
| References | () https://lists.fedoraproject.org/archives/list/[email protected]/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/ - | |
| References | () https://xenbits.xenproject.org/xsa/advisory-447.html - Patch, Vendor Advisory |
Published : 2024-01-05 17:15
Updated : 2025-11-04 19:16
NVD link : CVE-2023-46837
Mitre link : CVE-2023-46837
CVE.ORG link : CVE-2023-46837
JSON object : View
Improper Restriction of Operations within the Bounds of a Memory Buffer