The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain sensitive information by reading the registers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xen | Jul 30, 2024 | Sep 30, 2013 |
| Gentoo Linux | — | Upgrade app-emulations/xen-tools.Upgrade app-emulations/xen.Upgrade app-emulations/xen-pvgrub. | Oct 30, 2017 | Sep 30, 2013 |
| Suse | — | Upgrade xen-kmp-desktopUpgrade xen-toolsUpgrade xen-develUpgrade xen-kmp-traceUpgrade xenUpgrade xen-doc-pdfUpgrade xen-tools-domUUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade xen-libs-32bitUpgrade xen-libsUpgrade sle-sdk-release | Dec 12, 2013 | Sep 30, 2013 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Sep 30, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub