Xen Security Advisory 466 v3 (CVE-2024-53241) - Xen hypercall page unsafe against speculative attacks

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

             Xen Security Advisory CVE-2024-53241 / XSA-466
                                version 3

         Xen hypercall page unsafe against speculative attacks

UPDATES IN VERSION 3
====================

Update of patch 5, public release.

ISSUE DESCRIPTION
=================

Xen guests need to use different processor instructions to make explicit
calls into the Xen hypervisor depending on guest type and/or CPU
vendor. In order to hide those differences, the hypervisor can fill a
hypercall page with the needed instruction sequences, allowing the guest
operating system to call into the hypercall page instead of having to
choose the correct instructions.

The hypercall page contains whole functions, which are written by the
hypervisor and executed by the guest. With the lack of an interface
between the guest OS and the hypervisor specifying how a potential
modification of those functions should look like, the Xen hypervisor has
no knowledge how any potential mitigation should look like or which
hardening features should be put into place.

This results in potential vulnerabilities if the guest OS is using any
speculative mitigation that performs a compiler transform on "ret"
instructions in order to work (e.g. the Linux kernel rethunk or safe-ret
mitigations).

Furthermore, the hypercall page has no provision for Control-flow
Integrity schemes (e.g. kCFI/CET-IBT/FineIBT), and will simply
malfunction in such configurations.

IMPACT
======

Some mitigations for hardware vulnerabilities the guest OS is relying on to
work might not be fully functional, resulting in e.g. guest user processes
being able to read data they ought not have access to.

VULNERABLE SYSTEMS
==================

Only x86 systems are potentially vulnerable, Arm systems are not vulnerable.

All guest types (PV, PVH and HVM) are potentially vulnerable.

Linux guests are known to be vulnerable, guests using other operating
systems might be vulnerable, too.

MITIGATION
==========

Running only Linux guest kernels not relying on "ret" assembler instruction
patching (kernel config option CONFIG_MITIGATION_RETHUNK/CONFIG_RETHUNK
disabled) will avoid the vulnerability, as long as this option isn't
required to be safe on the underlying hardware.

CREDITS
=======

This issue was discovered by Andrew Cooper of XenServer.

RESOLUTION
==========

Applying the set of attached patches resolves this issue.

The patch to Xen is simply a documentation update to clarify that an OS author
might not want to use a hypercall page.

xsa466-linux-*.patch    Linux
xsa466-xen.patch        xen-unstable

$ sha256sum xsa466*
498fb2538f650d694bbd6b7d2333dcf9a12d0bdfcba65257a7d14c88f5b86801  xsa466-linux-01.patch
1e0d5f68d1cb4a0ef8914ae6bdeb4e18bae94c6d19659708ad707da784c0aa5c  xsa466-linux-02.patch
b3056b34c1565f901cb4ba11c03a51d4f045b5de7cd16c6e510e0bcee8cc6cd7  xsa466-linux-03.patch
0215e56739ab5b0d0ec0125f3d1806c3a0a0dcb3f562014f59b5145184a41467  xsa466-linux-04.patch
314e67060ab4f47883cf2b124d54ce3cd4b0363f0545ad907a7b754a4405aacd  xsa466-linux-05.patch
adbef75416379d96ebb72463872f993e9d8b7d119091480ad1e70fd448481733  xsa466-linux-06.patch
36874014cee5d5213610a6ffdd0e3e67d0258d28f2587b8470fdd0cef96e5013  xsa466-linux-07.patch
367f981ef8adc11b99cc6999b784305bcdcd55db0358fd6a2171509bf7f64345  xsa466-xen.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of patches or mitigations is NOT permitted (except where
all the affected systems and VMs are administered and used only by
organisations which are members of the Xen Project Security Issues
Predisclosure List).  Specifically, deployment on public cloud systems
is NOT permitted.

This is because the mitigation or patches need to be applied to the guests.

Deployment is permitted only AFTER the embargo ends.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----

iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmdhaxAMHHBncEB4ZW4u
b3JnAAoJEIP+FMlX6CvZUeMH/0Qkn9G8iQWJ0fHMCxvd1lcr3RNWK5GfXqlAZvuJ
YRQMDslYCzuvzrkLnoe/P/zSSs+omEYMcOVsJCBkTqePs8yIdqwBvBfZ79I1htIu
IdyJt8SE5+b70ZlumQJ8ef1Za3lp8bxvEZVa8GIokOu0Ef1iqUKNl7tQgIoQjOUH
bV/1sFN5MNFsUshOW5DnLiRrE8j0/0nfbzHPu5H9S2B4eN38oPmTabvZG/IHky8R
VFyTvqFrKZONDDhdxyFE9PBOtP6Bu3EV+Emmxb3Q84l2oEIqgab0Xxj4QGBTuLMn
PPcU5/D6Giqx3jBMdrkMAXtBuXBYO/inqsX1IJLic9W13+A=
=wlOW
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa466-linux-01.patch"
Content-Disposition: attachment; filename="xsa466-linux-01.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa466-linux-02.patch"
Content-Disposition: attachment; filename="xsa466-linux-02.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa466-linux-03.patch"
Content-Disposition: attachment; filename="xsa466-linux-03.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa466-linux-04.patch"
Content-Disposition: attachment; filename="xsa466-linux-04.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa466-linux-05.patch"
Content-Disposition: attachment; filename="xsa466-linux-05.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa466-linux-06.patch"
Content-Disposition: attachment; filename="xsa466-linux-06.patch"
Content-Transfer-Encoding: base64

RnJvbSBiMWMyY2I4NmY0YTc4NjE0ODBhZDU0YmI5YTU4ZGYzY2JlYmY4ZTky
IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKdWVyZ2VuIEdyb3Nz
IDxqZ3Jvc3NAc3VzZS5jb20+CkRhdGU6IFRodSwgMTcgT2N0IDIwMjQgMTQ6
NDc6MTMgKzAyMDAKU3ViamVjdDogeDg2L3hlbjogdXNlIG5ldyBoeXBlcmNh
bGwgZnVuY3Rpb25zIGluc3RlYWQgb2YgaHlwZXJjYWxsCiBwYWdlCgpDYWxs
IHRoZSBYZW4gaHlwZXJ2aXNvciB2aWEgdGhlIG5ldyB4ZW5faHlwZXJjYWxs
X2Z1bmMgc3RhdGljLWNhbGwKaW5zdGVhZCBvZiB0aGUgaHlwZXJjYWxsIHBh
Z2UuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTQ2NiAvIENWRS0yMDI0LTUzMjQx
LgoKUmVwb3J0ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIz
QGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEp1ZXJnZW4gR3Jvc3MgPGpn
cm9zc0BzdXNlLmNvbT4KQ28tZGV2ZWxvcGVkLWJ5OiBQZXRlciBaaWpsc3Ry
YSA8cGV0ZXJ6QGluZnJhZGVhZC5vcmc+CkNvLWRldmVsb3BlZC1ieTogSm9z
aCBQb2ltYm9ldWYgPGpwb2ltYm9lQHJlZGhhdC5jb20+Ci0tLQogYXJjaC94
ODYvaW5jbHVkZS9hc20veGVuL2h5cGVyY2FsbC5oIHwgMzMgKysrKysrKysr
KysrKysrKystLS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDIwIGluc2Vy
dGlvbnMoKyksIDEzIGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL2FyY2gv
eDg2L2luY2x1ZGUvYXNtL3hlbi9oeXBlcmNhbGwuaCBiL2FyY2gveDg2L2lu
Y2x1ZGUvYXNtL3hlbi9oeXBlcmNhbGwuaAppbmRleCA2YjRkZDRkZTA4YTYu
LjdkNWY4YWQ2Njc3NCAxMDA2NDQKLS0tIGEvYXJjaC94ODYvaW5jbHVkZS9h
c20veGVuL2h5cGVyY2FsbC5oCisrKyBiL2FyY2gveDg2L2luY2x1ZGUvYXNt
L3hlbi9oeXBlcmNhbGwuaApAQCAtMzksOSArMzksMTEgQEAKICNpbmNsdWRl
IDxsaW51eC9zdHJpbmcuaD4KICNpbmNsdWRlIDxsaW51eC90eXBlcy5oPgog
I2luY2x1ZGUgPGxpbnV4L3BndGFibGUuaD4KKyNpbmNsdWRlIDxsaW51eC9p
bnN0cnVtZW50YXRpb24uaD4KIAogI2luY2x1ZGUgPHRyYWNlL2V2ZW50cy94
ZW4uaD4KIAorI2luY2x1ZGUgPGFzbS9hbHRlcm5hdGl2ZS5oPgogI2luY2x1
ZGUgPGFzbS9wYWdlLmg+CiAjaW5jbHVkZSA8YXNtL3NtYXAuaD4KICNpbmNs
dWRlIDxhc20vbm9zcGVjLWJyYW5jaC5oPgpAQCAtOTEsOSArOTMsMTcgQEAg
ZXh0ZXJuIHN0cnVjdCB7IGNoYXIgX2VudHJ5WzMyXTsgfSBoeXBlcmNhbGxf
cGFnZVtdOwogdm9pZCB4ZW5faHlwZXJjYWxsX2Z1bmModm9pZCk7CiBERUNM
QVJFX1NUQVRJQ19DQUxMKHhlbl9oeXBlcmNhbGwsIHhlbl9oeXBlcmNhbGxf
ZnVuYyk7CiAKLSNkZWZpbmUgX19IWVBFUkNBTEwJCSJjYWxsIGh5cGVyY2Fs
bF9wYWdlKyVjW29mZnNldF0iCi0jZGVmaW5lIF9fSFlQRVJDQUxMX0VOVFJZ
KHgpCQkJCQkJXAotCVtvZmZzZXRdICJpIiAoX19IWVBFUlZJU09SXyMjeCAq
IHNpemVvZihoeXBlcmNhbGxfcGFnZVswXSkpCisjaWZkZWYgTU9EVUxFCisj
ZGVmaW5lIF9fQUREUkVTU0FCTEVfeGVuX2h5cGVyY2FsbAorI2Vsc2UKKyNk
ZWZpbmUgX19BRERSRVNTQUJMRV94ZW5faHlwZXJjYWxsIF9fQUREUkVTU0FC
TEVfQVNNX1NUUihfX1NDS19feGVuX2h5cGVyY2FsbCkKKyNlbmRpZgorCisj
ZGVmaW5lIF9fSFlQRVJDQUxMCQkJCQlcCisJX19BRERSRVNTQUJMRV94ZW5f
aHlwZXJjYWxsCQkJXAorCSJjYWxsIF9fU0NUX194ZW5faHlwZXJjYWxsIgor
CisjZGVmaW5lIF9fSFlQRVJDQUxMX0VOVFJZKHgpCSJhIiAoeCkKIAogI2lm
ZGVmIENPTkZJR19YODZfMzIKICNkZWZpbmUgX19IWVBFUkNBTExfUkVUUkVH
CSJlYXgiCkBAIC0xNTEsNyArMTYxLDcgQEAgREVDTEFSRV9TVEFUSUNfQ0FM
TCh4ZW5faHlwZXJjYWxsLCB4ZW5faHlwZXJjYWxsX2Z1bmMpOwogCV9fSFlQ
RVJDQUxMXzBBUkcoKTsJCQkJCQlcCiAJYXNtIHZvbGF0aWxlIChfX0hZUEVS
Q0FMTAkJCQkJXAogCQkgICAgICA6IF9fSFlQRVJDQUxMXzBQQVJBTQkJCQlc
Ci0JCSAgICAgIDogX19IWVBFUkNBTExfRU5UUlkobmFtZSkJCQkJXAorCQkg
ICAgICA6IF9fSFlQRVJDQUxMX0VOVFJZKF9fSFlQRVJWSVNPUl8gIyMgbmFt
ZSkJXAogCQkgICAgICA6IF9fSFlQRVJDQUxMX0NMT0JCRVIwKTsJCQkJXAog
CSh0eXBlKV9fcmVzOwkJCQkJCQlcCiB9KQpAQCAtMTYyLDcgKzE3Miw3IEBA
IERFQ0xBUkVfU1RBVElDX0NBTEwoeGVuX2h5cGVyY2FsbCwgeGVuX2h5cGVy
Y2FsbF9mdW5jKTsKIAlfX0hZUEVSQ0FMTF8xQVJHKGExKTsJCQkJCQlcCiAJ
YXNtIHZvbGF0aWxlIChfX0hZUEVSQ0FMTAkJCQkJXAogCQkgICAgICA6IF9f
SFlQRVJDQUxMXzFQQVJBTQkJCQlcCi0JCSAgICAgIDogX19IWVBFUkNBTExf
RU5UUlkobmFtZSkJCQkJXAorCQkgICAgICA6IF9fSFlQRVJDQUxMX0VOVFJZ
KF9fSFlQRVJWSVNPUl8gIyMgbmFtZSkJXAogCQkgICAgICA6IF9fSFlQRVJD
QUxMX0NMT0JCRVIxKTsJCQkJXAogCSh0eXBlKV9fcmVzOwkJCQkJCQlcCiB9
KQpAQCAtMTczLDcgKzE4Myw3IEBAIERFQ0xBUkVfU1RBVElDX0NBTEwoeGVu
X2h5cGVyY2FsbCwgeGVuX2h5cGVyY2FsbF9mdW5jKTsKIAlfX0hZUEVSQ0FM
TF8yQVJHKGExLCBhMik7CQkJCQlcCiAJYXNtIHZvbGF0aWxlIChfX0hZUEVS
Q0FMTAkJCQkJXAogCQkgICAgICA6IF9fSFlQRVJDQUxMXzJQQVJBTQkJCQlc
Ci0JCSAgICAgIDogX19IWVBFUkNBTExfRU5UUlkobmFtZSkJCQkJXAorCQkg
ICAgICA6IF9fSFlQRVJDQUxMX0VOVFJZKF9fSFlQRVJWSVNPUl8gIyMgbmFt
ZSkJXAogCQkgICAgICA6IF9fSFlQRVJDQUxMX0NMT0JCRVIyKTsJCQkJXAog
CSh0eXBlKV9fcmVzOwkJCQkJCQlcCiB9KQpAQCAtMTg0LDcgKzE5NCw3IEBA
IERFQ0xBUkVfU1RBVElDX0NBTEwoeGVuX2h5cGVyY2FsbCwgeGVuX2h5cGVy
Y2FsbF9mdW5jKTsKIAlfX0hZUEVSQ0FMTF8zQVJHKGExLCBhMiwgYTMpOwkJ
CQkJXAogCWFzbSB2b2xhdGlsZSAoX19IWVBFUkNBTEwJCQkJCVwKIAkJICAg
ICAgOiBfX0hZUEVSQ0FMTF8zUEFSQU0JCQkJXAotCQkgICAgICA6IF9fSFlQ
RVJDQUxMX0VOVFJZKG5hbWUpCQkJCVwKKwkJICAgICAgOiBfX0hZUEVSQ0FM
TF9FTlRSWShfX0hZUEVSVklTT1JfICMjIG5hbWUpCVwKIAkJICAgICAgOiBf
X0hZUEVSQ0FMTF9DTE9CQkVSMyk7CQkJCVwKIAkodHlwZSlfX3JlczsJCQkJ
CQkJXAogfSkKQEAgLTE5NSw3ICsyMDUsNyBAQCBERUNMQVJFX1NUQVRJQ19D
QUxMKHhlbl9oeXBlcmNhbGwsIHhlbl9oeXBlcmNhbGxfZnVuYyk7CiAJX19I
WVBFUkNBTExfNEFSRyhhMSwgYTIsIGEzLCBhNCk7CQkJCVwKIAlhc20gdm9s
YXRpbGUgKF9fSFlQRVJDQUxMCQkJCQlcCiAJCSAgICAgIDogX19IWVBFUkNB
TExfNFBBUkFNCQkJCVwKLQkJICAgICAgOiBfX0hZUEVSQ0FMTF9FTlRSWShu
YW1lKQkJCQlcCisJCSAgICAgIDogX19IWVBFUkNBTExfRU5UUlkoX19IWVBF
UlZJU09SXyAjIyBuYW1lKQlcCiAJCSAgICAgIDogX19IWVBFUkNBTExfQ0xP
QkJFUjQpOwkJCQlcCiAJKHR5cGUpX19yZXM7CQkJCQkJCVwKIH0pCkBAIC0y
MDksMTIgKzIxOSw5IEBAIHhlbl9zaW5nbGVfY2FsbCh1bnNpZ25lZCBpbnQg
Y2FsbCwKIAlfX0hZUEVSQ0FMTF9ERUNMUzsKIAlfX0hZUEVSQ0FMTF81QVJH
KGExLCBhMiwgYTMsIGE0LCBhNSk7CiAKLQlpZiAoY2FsbCA+PSBQQUdFX1NJ
WkUgLyBzaXplb2YoaHlwZXJjYWxsX3BhZ2VbMF0pKQotCQlyZXR1cm4gLUVJ
TlZBTDsKLQotCWFzbSB2b2xhdGlsZShDQUxMX05PU1BFQworCWFzbSB2b2xh
dGlsZShfX0hZUEVSQ0FMTAogCQkgICAgIDogX19IWVBFUkNBTExfNVBBUkFN
Ci0JCSAgICAgOiBbdGh1bmtfdGFyZ2V0XSAiYSIgKCZoeXBlcmNhbGxfcGFn
ZVtjYWxsXSkKKwkJICAgICA6IF9fSFlQRVJDQUxMX0VOVFJZKGNhbGwpCiAJ
CSAgICAgOiBfX0hZUEVSQ0FMTF9DTE9CQkVSNSk7CiAKIAlyZXR1cm4gKGxv
bmcpX19yZXM7Ci0tIAoyLjQzLjAKCg==

--=separator
Content-Type: application/octet-stream; name="xsa466-linux-07.patch"
Content-Disposition: attachment; filename="xsa466-linux-07.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa466-xen.patch"
Content-Disposition: attachment; filename="xsa466-xen.patch"
Content-Transfer-Encoding: base64
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--=separator--