Veille CVE

‹ Retour à la liste

CVE-2026-79611

5.5 Moyenne

Publiée le 13/10/2026 à 18:17 · Modifiée le 20/10/2026 à 20:17 · En attente d'analyse NVD · Source : security@xen.org

Description

For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state to be in. The resulting VMEntry failure is fatal to the guest. Sadly there is another special sub-case of the above, with branch tracing enabled. In that case the prior adjustment would still cause a VMentry failure, as before fatal to the guest.

Traduire en français

Produits concernés

Scores CVSS

VersionScoreSourceVecteur
3.1 5.5 Moyenne 134c704f-9b21-4f2e-91b3-4a467353bcc0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Faiblesses (CWE)

Références

Ailleurs