CyberRota Analysis
AI-GeneratedUnprivileged domains in Xen hypervisor environments are vulnerable due to a flaw in the management of the bitmap associated with the XEN_DOMCTL_get_domain_state operation. This vulnerability can lead to unauthorized access or manipulation of domain states, potentially compromising system integrity and stability. Organizations utilizing Xen for virtualization should prioritize patching this issue to mitigate the risk of exploitation.
Original NVD Description
Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To make this more robust, a new XEN_DOMCTL_get_domain_state was introduced. The management of the bitmap underlying that operation is tied into the binding of the VIRQ_DOM_EXC virtual IRQ. Unfortunately an error path there would tear down the bitmap even in cases when it wasn't set up. Unprivileged domains can trigger that error path.