PT-2024-7107 · Xen+3 · Xen+3
Andrew Cooper
·
Published
2024-04-09
·
Updated
2024-12-26
·
CVE-2024-31142
CVSS v3.1
7.5
High
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Xen (affected versions not specified)
Description
The issue is related to a logical error in the mitigation for Branch Type Confusion, which is not applied properly when intended. This error also impacts Speculative Return Stack Overflow, as it uses the same infrastructure. The vulnerability may allow an attacker to access confidential information and elevate their privileges.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Type Confusion
Protection Mechanism Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Red Os
Suse
Xen