tocsin

Debian/xen: medium 4.7

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.

Action: Upgrade xen to 4.17.5+23-ga4e5191dc0-1 or later.

Affected

introducedfixedlast affected
04.17.5+23-ga4e5191dc0-1-

Fixed versions

4.17.5+23-ga4e5191dc0-1

Sources

published · modified · JSON