https://seclists.org/oss-sec/2025/q4/139: Xen Security Advisory 471 v3 (CVE-2024-36350,CVE-2024-36357) - x86: Transitive Scheduler Attacks
Published Nov 5, 2025
·Updated
Affected Software
1 affected component
XEN Xen Hypervisor
Frequently Asked Questions
1
What is the severity of CVE-2024-36350 and CVE-2024-36357?
CVE-2024-36350 and CVE-2024-36357 are classified as high severity vulnerabilities in the Xen Hypervisor.
2
What vulnerabilities are addressed in Xen Security Advisory 471?
Xen Security Advisory 471 addresses two vulnerabilities, CVE-2024-36350 and CVE-2024-36357, related to transitive scheduler attacks.
3
How do I fix CVE-2024-36350 and CVE-2024-36357?
To fix CVE-2024-36350 and CVE-2024-36357, users should upgrade to the latest version of the Xen Hypervisor as recommended in the advisory.
4
What platforms are affected by CVE-2024-36350 and CVE-2024-36357?
CVE-2024-36350 and CVE-2024-36357 primarily affect systems running the x86 version of the Xen Hypervisor.
5
What are transitive scheduler attacks as referenced in CVE-2024-36350 and CVE-2024-36357?
Transitive scheduler attacks involve exploitation of vulnerabilities in the schedule management of virtual machines, potentially allowing unauthorized data access.