kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)

A flaw was found in Xen hypercall page handling within virtualized guest environments. The Xen hypercall page contains code generated by the hypervisor that lacks awareness of guest operating system CPU speculation mitigations, such as return instruction transforms, and Control-flow Integrity CFI...

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466)

A flaw was found in Xen hypercall page handling within virtualized guest environments. The Xen hypercall page contains code generated by the hypervisor that lacks awareness of guest operating system CPU speculation mitigations, such as return instruction transforms, and Control-flow Integrity CFI...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the x86/xen architecture handling PV iret hypercall incorrectly called via the hypercall page...

SUSE CVE-2024-53241

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer usin...