CVE-2019-17349

An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation.

An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation.

• Updated from 4.12.0 to 4.12.1
• Device quarantine for alternate pci assignment methods [XSA-306]
• x86: Machine Check Error on Page Size Change DoS [XSA-304, CVE-2018-12207]
• TSX Asynchronous Abort speculative side channel [XSA-305, CVE-2019-11135]
• VCPUOP_initialise DoS [XSA-296, CVE-2019-18420] (rhbz#1771368)
• missing descriptor table limit checking in x86 PV emulation [XSA-298, CVE-2019-18425] (rhbz#1771341)
• Issues with restartable PV type change operations [XSA-299, CVE-2019-18421] (rhbz#1767726)
• add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423] (rhbz#1771345)
• passed through PCI devices may corrupt host memory after deassignment [XSA-302, CVE-2019-18424] (rhbz#1767731)
• ARM: Interrupts are unconditionally unmasked in exception handlers [XSA-303, CVE-2019-18422] (rhbz#1771443)
• Unlimited Arm Atomics Operations [XSA-295, CVE-2019-17349, CVE-2019-17350] (rhbz#1720760)
• fix HVM DomU boot on some chipsets
• adjust grub2 workaround

These are all security issues fixed in the xen-4.15.1_01-1.2 package on the GA media of openSUSE Tumbleweed.

This update for xen to version 4.12.1 fixes the following issues:

• Fixed an issue which made Xen crash on AMD ROME based machines (bsc#1135799).
• Xenpvnetboot is now ported correctly to Python 3 (bsc#1138563).
• Added code to change LIBXL_HOTPLUG_TIMEOUT at runtime (bsc#1120095). The included README has details about the impact of this change
• Fixed an issue where the speculative mitigation facilities reported wrong status (bsc#1143563).
• Fixed an issue where Xen could not connect socket to /var/run/libvirt/libvirt-sock (bsc#1137471).
• Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above (bsc#1137717).
• Fixed a segmentation fault in Libvrtd during live migration to a VM (bsc#1145774).
• LTO is now disabled (bsc#1133296).
• Fixed an issue where Xen could not pre-allocate 1 shadow page (bsc#1145240).

This update for xen to version 4.10.4 fixes the following issues:

• Fixed an issue where libxenlight could not restore domain vsa6535522 on live migration (bsc#1133818).
• Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above (bsc#1137717).
• Fixed an issue where libxenlight could not create new domain (bsc#1131811).
• Fixed an issue where Xen could not pre-allocate 1 shadow page (bsc#1145240).
• Fixed an issue where attached pci devices were lost after reboot (bsc#1129642).
• Fixed a segmentation fault in Libvrtd during live migration to a VM (bsc#1145774).
• Xenpvnetboot is now ported correctly to Python 3 (bsc#1138563).