CVE-2023-46839

pci: phantom functions assigned to incorrect contexts

Medium · published March 20, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

PCI devices can make use of a functionality called phantom functions,

that when enabled allows the device to generate requests using the IDs

of functions that are otherwise unpopulated. This allows a device to

extend the number of outstanding requests.

Such phantom functions need an IOMMU context setup, but failure to

setup the context is not fatal when the device is assigned. Not

failing device assignment when such failure happens can lead to the

primary device being assigned to a guest, while some of the phantom

functions are assigned to a different domain.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Published
2024-03-20T10:35Z
EPSS history
Timeline
  • 20 MAR 10:35Z
    pci: phantom functions assigned to incorrect contexts
    cvelistv5