CLEANSTART-2024-YY69089

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-YY69089.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-YY69089
Upstream
Published
2026-10-31T14:20:58Z
Modified
2026-10-31T16:00:52Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of...
Details

Security vulnerability affects the xen package. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Stor....

References

Affected packages

CleanStart / xen

Package

Name
xen
Purl
pkg:apk/cleanstart/xen?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-YY69089.json"

CleanStart / xen

Package

Name
xen
Purl
pkg:apk/cleanstart/xen?arch=armv7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-YY69089.json"

CleanStart / xen

Package

Name
xen
Purl
pkg:apk/cleanstart/xen?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.11.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-YY69089.json"