mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-07 05:28:59 +00:00
21 lines
1.1 KiB
JSON
21 lines
1.1 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2024-31145",
|
||
|
|
"sourceIdentifier": "security@xen.org",
|
||
|
|
"published": "2024-09-25T11:15:12.133",
|
||
|
|
"lastModified": "2024-09-25T11:15:12.133",
|
||
|
|
"vulnStatus": "Received",
|
||
|
|
"cveTags": [],
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "Certain PCI devices in a system might be assigned Reserved Memory\nRegions (specified via Reserved Memory Region Reporting, \"RMRR\") for\nIntel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used\nfor platform tasks such as legacy USB emulation.\n\nSince the precise purpose of these regions is unknown, once a device\nassociated with such a region is active, the mappings of these regions\nneed to remain continuouly accessible by the device. In the logic\nestablishing these mappings, error handling was flawed, resulting in\nsuch mappings to potentially remain in place when they should have been\nremoved again. Respective guests would then gain access to memory\nregions which they aren't supposed to have access to."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {},
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "https://xenbits.xenproject.org/xsa/advisory-460.html",
|
||
|
|
"source": "security@xen.org"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|