CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-53241: x86/xen: don't do PV iret hypercall through hypercall page

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/xen: don't do PV iret hypercall through hypercall page

Instead of jumping to the Xen hypercall page for doing the iret
hypercall, directly code the required sequence in xen-asm.S.

This is done in preparation of no longer using hypercall page at all,
as it has shown to cause problems with speculation mitigations.

This is part of XSA-466 / CVE-2024-53241.

Vendor: Linux

Product: Linux

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 12.41% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

2024-12-25 00:30:37 UTC
CVE

x86/xen: don't do PV iret hypercall through hypercall page
2025-03-06 09:45:29 UTC
Tenable Plugins

Linux Distros Unpatched Vulnerability : CVE-2024-53241