x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest kernels run in ring 1. At the time when Xen was developed, this area of the i386 architecture was rarely used, which is why Xen was able to use it to implement paravirtualisation, Xen's novel approach to virtualization. In AMD64, Xen had to use a different implementation approach, so Xen does not use ring 1 to support 64-bit guests. With the focus now being on 64-bit systems, and the availability of explicit hardware support for virtualization, fixing speculation issues in ring 1 is not a priority for processor companies. Indirect Branch Restricted Speculation (IBRS) is an architectural x86 extension put together to combat speculative execution sidechannel attacks, including Spectre v2. It was retrofitted in microcode to existing CPUs. For more details on Spectre v2, see: http://xenbits.xen.org/xsa/advisory-254.html However, IBRS does not architecturally protect ring 0 from predictions learnt in ring 1. For more details, see: https://software.intel.com/security-software-guidance/deep-dives/deep-dive-indirect-branch-restricted-speculation Similar situations may exist with other mitigations for other kinds of speculative execution attacks. The situation is quite likely to be similar for speculative execution attacks which have yet to be discovered, disclosed, or mitigated.
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxencall1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxendevicemodel1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenevtchn1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenforeignmemory1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxengnttab1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenhypfs1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenmisc4.16", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenstore4", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxentoolcore1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxentoollog1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-hypervisor-4.16-amd64", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-hypervisor-4.16-arm64", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-hypervisor-4.16-armhf", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-system-amd64", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-system-arm64", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-system-armhf", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-utils-4.16", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-utils-common", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xenstore-utils", "binary_version": "4.16.0-1~ubuntu2.1" } ] }
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxencall1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxendevicemodel1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenevtchn1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenforeignmemory1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxengnttab1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenhypfs1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenmisc4.17t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenstore4t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxentoolcore1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxentoollog1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-hypervisor-4.17-amd64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-hypervisor-4.17-arm64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-hypervisor-4.17-armhf", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-system-amd64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-system-arm64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-system-armhf", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-utils-4.17", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-utils-common", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xenstore-utils", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" } ] }
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxencall1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxendevicemodel1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenevtchn1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenforeignmemory1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxengnttab1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenhypfs1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenmisc4.20", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenstore4", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxentoolcore1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxentoollog1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-hypervisor-4.20-amd64", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-hypervisor-4.20-arm64", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-system-amd64", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-system-arm64", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-utils-4.20", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-utils-common", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xenstore-utils", "binary_version": "4.20.0-1ubuntu1" } ] }
{ "binaries": [ { "binary_name": "libxen-4.6", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "libxen-dev", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "libxenstore3.0", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-utils-4.6", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-utils-common", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xenstore-utils", "binary_version": "4.6.5-0ubuntu1.4" } ] }
{ "binaries": [ { "binary_name": "libxen-4.9", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "libxen-dev", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "libxenstore3.0", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-utils-4.9", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-utils-common", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xenstore-utils", "binary_version": "4.9.2-0ubuntu1" } ] }
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxencall1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxendevicemodel1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxenevtchn1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxenforeignmemory1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxengnttab1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxenmisc4.11", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxenstore3.0", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxentoolcore1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxentoollog1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.11-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.11-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.11-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.9-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.9-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.9-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-system-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-system-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-system-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-utils-4.11", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-utils-common", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xenstore-utils", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" } ] }