The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to.
When processing of hypercalls takes a considerable amount of time, the hypervisor may choose to invoke a hypercall continuation. Doing so involves putting (perhaps updated) hypercall arguments in respective registers. For guests not running in 64-bit mode this further involves a certain amount of translation of the values.
Unfortunately internal sanity checking of these translated values assumes high halves of registers to always be clear when invoking a hypercall. When this is found not to be the case, it triggers a consistency check in the hypervisor and causes a crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Jun 6, 2024 | May 16, 2024 |
| Debian | — | Upgrade xen | Dec 30, 2024 | May 16, 2024 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | May 16, 2024 |
| Suse | — | Upgrade xen-tools-domUUpgrade xenUpgrade xen-doc-htmlUpgrade xen-develUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade xen-libsUpgrade xen-tools-xendomains-wait-disk | Apr 15, 2024 | Apr 12, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub