{
  "cveId": "CVE-2023-34326",
  "url": "https://patchblox.com/security/cve/CVE-2023-34326",
  "summary": "CVE-2023-34326 is fixed in xen on 1 platform, first by DEBIAN-CVE-2023-34326, released January 5, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "xen: The caching invalidation guidelines from the AMD-Vi specification (48882\u2014Rev 3.07-PUB\u2014Oct 2022) is incorrect on some...",
  "description": "The caching invalidation guidelines from the AMD-Vi specification (48882\u2014Rev 3.07-PUB\u2014Oct 2022) is incorrect on some hardware, as devices will malfunction (see stale DMA mappings) if some fields of the DTE are updated but the IOMMU TLB is not flushed.  Such stale DMA mappings can point to memory ranges not owned by the guest, thus allowing access to unindented memory regions.",
  "published": "2024-01-05T17:15:08Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00275,
  "epssPercentile": 0.20037,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "xen",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "4.17.2\u002B76-ge1f9cb16e2-1~deb12u1",
      "fix": "DEBIAN-CVE-2023-34326",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-34326",
      "released": "2024-01-05T17:15:08Z"
    },
    {
      "platform": "linux",
      "product": "xen",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "4.17.2\u002B55-g0b56bed864-1",
      "fix": "DEBIAN-CVE-2023-34326",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-34326",
      "released": "2024-01-05T17:15:08Z"
    },
    {
      "platform": "linux",
      "product": "xen",
      "release": "Debian 14",
      "fixedVersion": "4.17.2\u002B55-g0b56bed864-1",
      "fix": "DEBIAN-CVE-2023-34326",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-34326",
      "released": "2024-01-05T17:15:08Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}