CVE-2024-31144

Xapi contains a metadata injection vulnerability in its backup and restore functionality. The system retrieves metadata from Virtual Disk Images (VDIs) by searching for the first match in alphanumeric UUID order. Because the host does not trust VDI content, a malicious guest can manipulate its ow...

XenServer metadata restore failed "No valid Btrfs found on <metadata backup vdi path> Superblock bytenr is larger than device size <vm import command>

...

pvcreate --restorefile fails "/dev/sdx device not found or ignored by filtering" in XenServer

When trying to restore the lvm metadata on a Physical volume from backup using the command pvcreate --restorefile, it is failing with the error /dev/sdx device not found...