Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

Two vulnerabilities have been discovered in the Xen hypervisor, allowing a malicious virtual machine to access and modify the memory of other virtual machines on the same host. This includes dom0, the default virtual machine with full permissions that manages other virtual machines. The Xen Project has released patches to address these flaws. There are no known mitigations for the vulnerabilities. All Xen versions from 4.6 onward are affected by these flaws. The Xen Project issued an advisory on the vulnerabilities on November 3.