CVE-2024-31142: high-severity vulnerability in Xen
x86: Incorrect logic for BTC/SRSO mitigations
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A logic error in Xen's mitigation for Branch Type Confusion (BTC) and Speculative Return Stack Overflow (SRSO) vulnerabilities causes the protections to not activate as intended, leaving the system exposed to these hardware-level attacks.
XSA-407 and XSA-434 mitigations in Xen x86 contain a logical flaw that prevents proper activation of BTC/SRSO defenses. An attacker with local access to a guest VM can exploit speculative execution weaknesses to breach isolation between domains or extract sensitive data, since the intended mitigation code path is not executed.
In the same product, most dangerous first.