https://seclists.org/oss-sec/2025/q3/141: Xen Security Advisory 471 v2 (CVE-2024-36350,CVE-2024-36357) - x86: Transitive Scheduler Attacks
Published Aug 28, 2025
·Updated
Affected Software
1 affected component
XEN Xen
Frequently Asked Questions
1
What is the severity of CVE-2024-36350?
CVE-2024-36350 is classified as a critical vulnerability affecting Xen's Scheduler.
2
What is the severity of CVE-2024-36357?
CVE-2024-36357 is also classified as a critical vulnerability related to transitive scheduler attacks in Xen.
3
How do I fix CVE-2024-36350?
To remediate CVE-2024-36350, you should upgrade to the latest version of Xen that addresses this vulnerability.
4
How do I fix CVE-2024-36357?
Fix for CVE-2024-36357 can be achieved by applying patches provided in the Xen Security Advisory XSA-471.
5
What impact do the vulnerabilities CVE-2024-36350 and CVE-2024-36357 have on Xen?
These vulnerabilities may allow malicious actors to conduct transitive attacks against the scheduler, potentially compromising system integrity.