CVE-2020-27674

—

CVSS 3.1

5.3 medium

EPSS

<1%p29

Published

Oct 22, 2020 (Oct 22, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.

Vendors: xen fedoraproject debian
Products: xen, fedora, debian linux
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.