Xen Hypervisor Vulnerabilities Enable Cross-VM Memory Access
Two security flaws in the Xen hypervisor allow malicious guest VMs to read and write memory of other virtual machines on the same host
Key Takeaways
- Two security flaws in the Xen hypervisor allow cross-VM memory read/write attacks
- All Xen versions from 4.6 onward are affected, including dom0
- Patches have been released; users should update immediately
- No known mitigation exists beyond patching
- Affects multi-tenant cloud and virtualized environments
Quick answers
- What happened?
- The Xen Project has disclosed two security flaws in the Xen hypervisor that allow a malicious guest virtual machine to read and write the memory of other VMs on the same physical host, including dom0. The vulnerabilities affect all Xen versions from 4.6 onward. Patches have been released, but no known mitigation exists beyond updating to the latest patched version.
- Which products are affected?
- Xen Hypervisor
- What should defenders do?
- Users should update to the latest patched version of the Xen hypervisor as released by the Xen Project. See the official Xen Project advisory for specific version mappings and download links. No known mitigation exists beyond patching.
The Xen Project issued an advisory on November 3, 2026, disclosing two security flaws in the Xen hypervisor that allow a malicious guest virtual machine to read and write the memory of other virtual machines on the same physical host. The vulnerabilities stem from insufficient access controls and improper handling of guest physical addresses.
Dom0, the virtual machine that by default has full permissions and manages other VMs, is also affected by these flaws. All Xen versions from 4.6 onward are vulnerable.
The advisory states that patches have been released. The Xen Project recommends that users update to the latest patched version to address the vulnerabilities. No known mitigation exists beyond patching at the time of the advisory.
The disclosure highlights the importance of keeping hypervisor software up to date, as these types of vulnerabilities can have significant implications for multi-tenant cloud environments and organizations relying on virtual machine isolation.
Security Details
Two security flaws in the Xen hypervisor allow a malicious guest virtual machine to read and write the memory of other VMs on the same physical host, including dom0. The vulnerabilities stem from insufficient access controls and improper handling of guest physical addresses.
Affected products
Xen Hypervisor
Mitigation
Users should update to the latest patched version of the Xen hypervisor as released by the Xen Project. See the official Xen Project advisory for specific version mappings and download links. No known mitigation exists beyond patching.
Sources
The Hacker News
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
Nov 4, 2026 · 11:46
Original link
Related Security News
Critical Ruby on Rails Active Storage Vulnerability Allows Server File Writing via ImageMagick
A critical security flaw in the Ruby on Rails framework has been disclosed that permits unauthenticated attackers to write arbitrary files on application servers. The vulnerability resides in Active Storage, the component responsible for handling file uploads, when ImageMagick is used for image processing. The Rails project has released fixes in versions 8.1.4.1 and 8.0.5.2. Exploitation requires the application to process user-uploaded files through ImageMagick, and the full impact depends on server configuration.
