CLEANSTART-2024-DW33398

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-DW33398.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-DW33398
Upstream
Published
2026-10-31T14:19:13Z
Modified
2026-10-31T16:00:03Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability
Details

Security vulnerability affects the xen package. Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a "double fetch" vulnerability.

References

Affected packages

CleanStart / xen

Package

Name
xen
Purl
pkg:apk/cleanstart/xen?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.7.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-DW33398.json"

CleanStart / xen

Package

Name
xen
Purl
pkg:apk/cleanstart/xen?arch=armv7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.7.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-DW33398.json"

CleanStart / xen

Package

Name
xen
Purl
pkg:apk/cleanstart/xen?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.7.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-DW33398.json"