arm32: The cache may not be properly cleaned/invalidated

CVE-2023-34321

What is CVE-2023-34321?

A vulnerability exists within the cache management functionality provided by Arm, impacting how memory regions are cleaned and invalidated. The involved helpers are crucial for ensuring that all data has been correctly written to memory, especially during operations involving guest memory allocation. However, a flaw in the arithmetic calculations used by these helpers can lead to overflow scenarios. When this occurs, the necessary cache cleaning or invalidation may be skipped, thereby compromising the assurance that all writes have completed successfully. This situation poses significant risks to memory integrity, particularly in environments using virtualization technologies.

References