CVE-2023-34321: arm32: The cache may not be properly cleaned/invalidated

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-05 · updated 2026-06-17
Weakness: CWE-119

Description

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes (such as the ones during scrubbing) have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the helpers can overflow and would then result to skip the cache cleaning/invalidation. Therefore there is no guarantee when all the writes will reach the memory.

Affected products

xen: through 4.16

References

https://xenbits.xenproject.org/xsa/advisory-437.html
http://xenbits.xen.org/xsa/advisory-437.html
https://xenbits.xenproject.org/xsa/advisory-437.html

Get alerted when CVE-2023-34321 or the next vulnerability affects your stack