CVE-2024-31142
Assigner: XEN
Published: 2024-05-16T13:39:42.774Z
State: PUBLISHED
title: x86: Incorrect logic for BTC/SRSO mitigations
datePublic: 2024-04-09T16:29:00Z
descriptions: value: Because of a logical error in XSA-407 (Branch Type Confusion), the
mitigation is not applied properly when it is intended to be used.
XSA-434 (Speculative Return Stack Overflow) uses the same
infrastructure, so is equally impacted.

For more details, see:
  https://xenbits.xen.org/xsa/advisory-407.html
  https://xenbits.xen.org/xsa/advisory-434.html

impacts: descriptions: value: XSAs 407 and 434 are unmitigated, even when the patches are in place.

affected: defaultStatus: unknown
product: Xen
vendor: Xen
versions: status: unknown
version: consult Xen advisory XSA-455
configurations: value: All versions of Xen containing the XSA-407 fixes are vulnerable.

See XSAs 407 and 434 for details on which hardware is susceptible to
BTC/SRSO.

workarounds: value: There are no mitigations.

credits: type: finder
value: This issue was discovered by Andrew Cooper of XenServer.