PT-2026-111667 · Enserver · Xenserver
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
XenServer versions 8.4 through 9
Description
A logic error exists in the handling of XSA-308 where VMX VMEntry checks fail when a specific state combination occurs: #DB is intercepted, Single Stepping is active, and blocked by STI/MovSS is active. This failure is fatal to the guest. A similar issue occurs when branch tracing is enabled, also resulting in a fatal VMEntry failure for the guest.
Recommendations
Update XenServer versions 8.4 through 9 to the latest version.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Xenserver