Memory Leak Vulnerability in Xen Project Affecting PVH Guests

CVE-2024-45819

What is CVE-2024-45819?

CVE-2024-45819 is a high-severity vulnerability affecting the Xen Hypervisor, specifically in the way ACPI tables are constructed for PVH guests. When the toolstack creates these tables, it initializes the local memory correctly for used parts but fails to clear the excess allocated space before copying to guest memory. This oversight may lead to sensitive data exposure from previous operations stored in the uninitialized local memory. Users of the affected versions of the Xen Hypervisor should urgently evaluate their systems and apply necessary patches to mitigate risks associated with this vulnerability.

References