CVE-2020-27674

Description

An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.

References

https://xenbits.xen.org/xsa/advisory-286.html

https://www.debian.org/security/2020/dsa-4804

https://security.gentoo.org/glsa/202011-06

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XIK57QJOVOPWH6RFRNMGOBCROBCKMDG2/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3U4LNKKXU4UP4Z5XP6TMIWSML3QODPE/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZAM3LYJ5TZLSSNL3KXFILM46QKVTOUA/

http://www.openwall.com/lists/oss-security/2021/01/19/5

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3