Two vulnerabilities in the Xen hypervisor enable a malicious guest virtual machine (VM) to access and modify the memory of other VMs on the same host, including the dom0 This article explores vulnerabilities xen. . Stephan Lipp from Ada Logics validated the finding, and the CodeAnt AI Security Research Team independently reported the same issue.
The vulnerabilities lie within the grant copy functionality of the operation Xen employs for transferring data between virtual machines.
The open-source virtualization platform XCP-ng, based on Xen, noted in its update that a single compromised guest can escape its isolation and take control of the entire host. Qubes OS is a security-focused desktop operating system that segregates software into separate Xen-based compartments called qubes. Because every Xen version from 4.6 onwards is vulnerable, other products based on those versions are affected until their makers apply the XSA-523 patches.
As of November 4, Debian's security tracker indicated that the xen package was vulnerable in its bookworm, trixie, and forky releases, and fixed in sid. Vates evaluates the impact as Critical. Dom0 needs to be restarted, and Anti Evil Maid users must reseal their secret passphrase due to changes in PCR18 and PCR19 from the new Xen binaries.
The affected packages were subsequently placed in the security-testing repository, which will be moved to the stable repository over the next two weeks following community testing.
