Ubuntu patches AWS Linux kernel flaws, including Xen frontend bug
A malicious Xen backend could read guest memory pages or crash the guest; other kernel subsystems are also fixed.
Stories per day · 30 days
4 RSS
Relatedlinux5linux-kernel4ubuntu4use-after-free4xen-netback3xsa3amd2aws2canonical2denial-of-service2hypervisor2side-channel2xapi2access-control1authentication1bluetooth1citrix1grant-copy1
13 stories, newest first · one card per story
Stories tagged #xen
Xen XSA-528: guest-triggered use-after-free in Linux xen-blkback
Xen-blkback driver fails to serialize reads of I/O statistics allowing use-after-free during device teardown.
Xen XAPI compares Pool Secret with a data-dependent function (CVE-2026-102705)
XSA-529 version 2 is the public release of an issue in the bearer token that authenticates hosts in a Xen pool.
Xen updates advisory on AMD Transient Scheduler Attacks (XSA-525)
The update covers CVE-2024-36350, CVE-2024-36357, and CVE-2026-0004 after AMD reported further TSA properties.
Citrix XenServer Flaw Allows Unauthenticated Host Compromise
Updates fix nine CVEs including unauthenticated remote takeover in XenServer 8.4 and 9; Citrix rates as Critical.
Xen hypervisor flaws let one VM read and write any other VM memory
Xen versions 4.6+ allow a malicious guest VM to read and write memory of other VMs including dom0 via grant copy permission checks.
1
Xen XSA-523 v2 discloses arbitrary read/write via grant copy
Public release of XSA-523 v2 details batch grant copy optimizations and potential read/write issues in Xen.
Ubuntu kernel update fixes Xen netback DoS and Bluetooth flaw
A guest can exhaust backend memory, and a local user may crash the system or possibly run code.
Ubuntu AWS kernel fix addresses Xen backend memory DoS
A guest that stops processing packets can exhaust kernel memory in the Xen network backend domain.
Xen Security Advisory 522 v1 (CVE-2026-98375) - Linux xen-netfront: backend can crash guest via malformed RX packets
Xen XSA-522 warns a malicious backend can crash Linux guests via malformed xen-netfront packets, CVE-2026-98375.
Re: cloud computing provider disclosures
oss-security reply says Xen, KVM, QEMU, and Cloud Hypervisor already have separate disclosure processes.
Xen Security Advisory 511 v3 (CVE-2026-79603) - Unconditionally do TLB flushing ahead of page scrubbing
Xen Project released XSA-511 (CVE-2026-79603) fixing missing TLB flushes before page scrubbing that can leak x86 PV guest data.
Xen Security Advisory 509 v3 (CVE-2026-62437) - x86: DMs may cause mem leak by IRQ binding
Xen Project released XSA-509 (CVE-2026-62437) fixing a memory leak in IRQ tracking when guests with assigned PCI devices are terminated.