5.5
Moyenne
CVE-2026-79611 For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB…
Description
For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state to be in. The resulting VMEntry failure is fatal to the guest. Sadly there is another special sub-case of the above, with branch tracing enabled. In that case the prior adjustment would still cause a VMentry failure, as before fatal to the guest.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| xen | Versions non publiées |
Autres CVE de xen
Les 142 CVE de xen →
CVE-2026-102703
arbitrary read/write via grant copy
4.4
Moyenne
CVE-2026-102704
arbitrary read/write via grant copy
4.4
Moyenne
CVE-2026-102700
With its original introduction, GNTTAB_cache_flush was made available
uniformly
4.7
Moyenne
CVE-2026-102702
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
7.5
Élevée