The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / value between old and new code positions. The now wrong use of the variable did lead to a wrong TLB flush condition, omitting flushes where such are necessary.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 26, 2024 | Jul 26, 2022 |
| Debian | — | Upgrade xen | Nov 8, 2022 | Jul 26, 2022 |
| Suse | — | Upgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-tools-xendomains-wait-diskUpgrade xenUpgrade xen-develUpgrade xen-tools-domUUpgrade xen-tools | Oct 26, 2022 | Jul 26, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub