TI-2023-25300 Aliases CVE-2023-46839 GHSA-8f65-fxmq-vvpx

pci: phantom functions assigned to incorrect contexts

LOW 26Published 2024-03-20 · Updated 2025-11-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Low · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise unpopulated. This allows a device to extend the number of outstanding requests. Such phantom functions need an IOMMU context setup, but failure to setup the context is not fatal when the device is assigned. Not failing device assignment when such failure happens can lead to the primary device being assigned to a guest, while some of the phantom functions are assigned to a different domain.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00805 56th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Xen	Xen	—	—	No fix listed	CNA

Xen VendorXen Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:xen:xen:::::::x86:*	all versions	Vulnerable	Xen
cpe:2.3:o:fedoraproject:fedora:39:::::::*	39	Vulnerable	Fedoraproject

cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:* Versions all versions Vulnerable ·Xen
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-10-02 Threatist record created from CVE-2023-46839
2026-10-03 Alias added: GHSA-8f65-fxmq-vvpx

References

Patch 2

Advisory 1

https://lists.fedoraproject.org/archives/list/[email protected]/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/

TI-2012-00210 The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix… CVSS 2.0HIGH 7.2
TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
TI-2015-04333 The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used… CVSS 2.0HIGH 9.3
TI-2015-06741 The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows… CVSS 3.1CRITICAL 10.0
TI-2018-06436 A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures… CVSS 3.0HIGH 7.8
TI-2024-20522 x86: Incorrect logic for BTC/SRSO mitigations CVSS 3.1HIGH 7.5

See all 489 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences