All vulnerabilities

Servers and applications

CVE-2020-25596

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than…

Severity
Medium 5.5
Published
23 Sept 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • From 3.2.0 up to 4.14.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-25596
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-25596