Xen
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by The Hacker NewsTwo Xen hypervisor flaws let a malicious VM read and write other VMs' memory
- Security update reported by Ubuntu Security NoticesUbuntu issues several Linux kernel security updates fixing multiple flaws
Recent news
Two Xen hypervisor flaws let a malicious VM read and write other VMs' memory
Two flaws in the Xen hypervisor allow a malicious guest VM to read and write the memory of other VMs on the same host, including dom0, which by default has full permissions and manages the others. The Xen Project published an advisory on November 3 saying patches are out and no mitigation is known. All Xen versions from 4.6 onward are reported as vulnerable.
Ubuntu issues several Linux kernel security updates fixing multiple flaws
Ubuntu published five Linux kernel security notices, USN-8961-1, USN-8963-1, USN-8959-1, USN-8968-1 and USN-8967-1, covering many subsystems and drivers. They include CVE-2022-1205, a race condition in the AX.25 amateur radio protocol causing use-after-free and a local denial of service; CVE-2022-3114, a null pointer dereference in the i.MX clock driver; CVE-2021-3640, a Bluetooth use-after-free that could possibly allow code execution; and a Xen network backend issue that lets a guest VM exhaust kernel memory in the backend domain.