CVE-2024-31142

published 2024-05-16

CVE-2024-31142: Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used. XSA-434 (Speculative…

Priority P3 55 high 7.5 CVSS 3.1

AV N AC H PR L UI N S U C H I H A H

Because of a logical error in XSA-407 (Branch Type Confusion), the
mitigation is not applied properly when it is intended to be used.
XSA-434 (Speculative Return Stack Overflow) uses the same
infrastructure, so is equally impacted.

For more details, see:
https://xenbits.xen.org/xsa/advisory-407.html
https://xenbits.xen.org/xsa/advisory-434.html

Affected

18 ranges

Vendor	Product	Version range	Fixed in
debian	xen	< xen 4.17.5+23-ga4e5191dc0-1 (bookworm)	xen 4.17.5+23-ga4e5191dc0-1 (bookworm)
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
xen	xen	< 4.15.6	4.15.6
xen	xen	>= 0 < 4.16.6-r0	4.16.6-r0
xen	xen	>= 0 < 4.16.6-r0	4.16.6-r0
xen	xen	>= 0 < 4.17.4-r0	4.17.4-r0
xen	xen	>= 0 < 4.18.2-r0	4.18.2-r0
xen	xen	>= 0 < 4.18.2-r0	4.18.2-r0
xen	xen	>= 0 < 4.18.2-r0	4.18.2-r0
xen	xen	>= 0 < 4.18.2-r0	4.18.2-r0
xen	xen	>= 0 < 4.18.2-r0	4.18.2-r0
xen	xen	>= 0 < 4.17.5+23-ga4e5191dc0-1	4.17.5+23-ga4e5191dc0-1
xen	xen	>= 0 < 4.19.1-1	4.19.1-1
xen	xen	>= 0 < 4.19.1-1	4.19.1-1
xen	xen	>= 4.16.0 < 4.16.6	4.16.6
xen	xen	>= 4.17.0 < 4.17.4	4.17.4
xen	xen	>= 4.18.0 < 4.18.2	4.18.2

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

osv 7.5 HIGH

vendor_debian 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-693