CVE-2024-31142

2024-05-1614:15:08

[email protected]

web.nvd.nist.gov

logical error

xsa-407

xsa-434

branch type confusion

speculative return stack overflow

infrastructure

impact

mitigation

advisory

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Because of a logical error in XSA-407 (Branch Type Confusion), the
mitigation is not applied properly when it is intended to be used.
XSA-434 (Speculative Return Stack Overflow) uses the same
infrastructure, so is equally impacted.

For more details, see:
https://xenbits.xen.org/xsa/advisory-407.html
https://xenbits.xen.org/xsa/advisory-434.html

References

xenbits.xenproject.org/xsa/advisory-455.html