CVE-2020-11740

Name of the Vulnerable Software and Affected Versions Xen versions through 4.13.x

Description An issue in xenoprof allows guest OS users without active profiling to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.

Recommendations For Xen versions through 4.13.x, consider disabling the xenoprof feature until a patch is available to prevent unprivileged guests from mapping xenoprof buffers and obtaining sensitive information about other guests.