Bug 2362257 (CVE-2025-1713)

Summary: CVE-2025-1713 xen: Deadlock Potential with VT-d and Legacy PCI Device Pass-Through
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in Xen's handling of interrupt remapping for legacy PCI(-X) devices when using Intel's VT-d. Specifically, acquiring a lock during the setup process in an unsafe context can lead to a deadlock. This issue can be triggered by passing through certain devices to unprivileged guests, potentially resulting in a denial of service affecting the entire host.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2362259, 2362260, 2362261    
Bug Blocks:    

Description OSIDB Bzimport 2025-04-25 07:22:21 UTC 
A local attacker (e.g., an unprivileged guest) with access to a passed-through legacy PCI(-X) device on a system using Intel VT-d can trigger a deadlock in the Xen hypervisor. This can result in a denial of service (DoS) that affects the entire host. The issue arises due to unsafe locking during interrupt remapping setup for certain devices. The vulnerability impacts Xen versions 4.0 and later on systems with Intel IOMMU (VT-d) hardware. Systems using AMD or non-x86 hardware are not affected. Avoiding pass through of the affected device types mitigates the issue.