CVE-2020-27672

A race condition flaw was found in the Xen code responsible for handling the updating of the hypervisor’s own page tables. This flaw allows a malicious guest to cause a denial of service, host data corruption, or potential privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.

Mitigation

Running all guests in HVM or PVH mode, in each case with HAP enabled, will prevent those guests from exploiting the vulnerability.