An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Jun 16, 2020 | Apr 14, 2020 |
| Debian | — | Upgrade xen | Jul 14, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Jun 15, 2020 | Apr 14, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 14, 2020 |
| Suse | — | Upgrade xen-develUpgrade xenUpgrade xen-doc-htmlUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade xen-libsUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade xen-toolsUpgrade xen-tools-xendomains-wait-disk | May 1, 2020 | Apr 14, 2020 |
| Ubuntu | — | Upgrade libxengnttab1Upgrade xen-utils-4.11Upgrade libxendevicemodel1Upgrade libxenmisc4.11Upgrade xen-hypervisor-4.11-arm64Upgrade xenstore-utilsUpgrade libxenevtchn1Upgrade xen-utils-commonUpgrade xen-hypervisor-4.11-amd64Upgrade xen-hypervisor-4.11-armhf | Sep 20, 2022 | Apr 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub