Log in Start free

Vulnerability · Published May 16, 2024 · Assigned by XEN

CVE-2024-31142x86: Incorrect logic for BTC/SRSO mitigations

High 7.5

In plain English

A high-severity security flaw in Xen from Xen. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 17.4% (higher than 97% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)17.4%top 2.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used. XSA-434 (Speculative Return Stack Overflow) uses the same infrastructure, so is equally impacted. For more details, see: https://xenbits.xen.org/xsa/advisory-407.html https://xenbits.xen.org/xsa/advisory-434.html

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20xen4.18.2-r0ALPINE-CVE-2024-31142
Alpine:v3.21xen4.18.2-r0ALPINE-CVE-2024-31142
Alpine:v3.22xen4.18.2-r0ALPINE-CVE-2024-31142
Alpine:v3.23xen4.18.2-r0ALPINE-CVE-2024-31142
Alpine:v3.24xen4.18.2-r0ALPINE-CVE-2024-31142
Debian:12xen4.17.5+23-ga4e5191dc0-1DEBIAN-CVE-2024-31142
Debian:12xen4.17.5+23-ga4e5191dc0-1DSA-5836-1
Debian:13xen4.19.1-1DEBIAN-CVE-2024-31142
Debian:14xen4.19.1-1DEBIAN-CVE-2024-31142
Ubuntu:22.04:LTSxenno fix listedUBUNTU-CVE-2024-31142
Ubuntu:24.04:LTSxenno fix listedUBUNTU-CVE-2024-31142
Ubuntu:25.10xenno fix listedUBUNTU-CVE-2024-31142
Ubuntu:26.04:LTSxenno fix listedUBUNTU-CVE-2024-31142
Ubuntu:26.10xenno fix listedUBUNTU-CVE-2024-31142

Affected products (as reported)

VendorProductVersions
Xen Xen see references

Weakness: CWE-693 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References