[Oraclevm-errata] New xen updates available via Ksplice (OVMSA-2022-0003)

[Errata Announcements for Oracle VM]

Synopsis: OVMSA-2022-0003 can now be patched using Ksplice
CVEs: CVE-2017-17044 CVE-2017-17045 CVE-2021-28705 CVE-2021-28706 CVE-2021-28709

Users with Oracle VM Premier Support can now use Ksplice to patch
against the latest Oracle VM Security Fix Advisory, OVMSA-2022-0003.

INSTALLING THE UPDATES

We recommend that all users of Ksplice on OVM 3.4 install these
updates.

You can install these updates by running:

# ksplice -y xen upgrade

Ksplice Xen patching requires installation of Ksplice-aware packages and the
system must be rebooted after the first installation of these packages.  Refer
to the installation instructions for the Enhanced Ksplice Client in the Ksplice
User's Guide for more details.  Systems may be prepared for Ksplice patching by
installing the Ksplice aware packages in advance, prior to installing the
enhanced Ksplice client.

DESCRIPTION

* CVE-2017-17044, XSA-246: Denial-of-service when using populate-on-demand feature.

A logic error when using populate-on-demand for memory management could
lead to a denial-of-service. A HVM guest could use this flaw to cause a
denial-of-service.

Orabug: 31241596


* CVE-2017-17045, XSA-247: Privilege escalation in memory handling with populate on demand activated.

A logic error when handling populate on demand (PoD) memory pool could
lead to having multiple guests sharing a same page. A malicious guest
could use this flaw to leak information or escalate privilege.

Orabug: 31245546


* CVE-2021-28706, XSA-385: Denial-of-service when guest increases its memory.

Missing checks when a guest increases its memory could lead to an
overflow where the guest can ask for more memory than allowed. A
malicious guest could use this flaw to cause a denial-of-service.

Orabug: 33617675


* CVE-2021-28705, CVE-2021-28709, XSA-389: Denial-of-service when using populate on demand.

Issues in error handling when removing or inserting pages from populate
on demand pool could lead to a use-after-free. A malicious guest could
use this flaw to cause a denial-of-service, escalate privileges or leak
information from other guests.

Orabug: 33617682


SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.