CVE-2024-45819: libxl leaks data to PVH guests via ACPI tables
PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local memory, which are then copied into guest memory. While actually used parts of the local memory are filled in correctly, excess space that is being allocated is left with its prior contents.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45819?
CVE-2024-45819 is classified as a high-severity vulnerability due to potential memory leakage in PVH guests.
How do I fix CVE-2024-45819?
To mitigate CVE-2024-45819, you should update to the latest version of Xen libxl that addresses this vulnerability.
What impact does CVE-2024-45819 have on my system?
CVE-2024-45819 may allow unauthorized access to sensitive data within the memory of PVH guest instances.
Is CVE-2024-45819 exploitable remotely?
Yes, CVE-2024-45819 could be exploited remotely if proper network and guest isolation measures are not in place.
Who is affected by CVE-2024-45819?
CVE-2024-45819 affects users running Xen libxl with PVH guests due to improper handling of ACPI tables.