https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:21:53 +0000 https://cve.radiocsirt.org/vuln/cve-2023-46841 <p><strong>Affected:</strong> Xen</p> <p>Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET). A sub-feature of this are Shadow Stacks (CET-SS). CET-SS is a hardware feature designed to protect against Return Oriented Programming attacks. When enabled, traditional stacks holding both data and return addresses are accompanied by so called &#34;shadow stacks&#34;, holding little more than return addresses. Shadow stacks aren&#39;t writable by normal instructions, and upon function returns their contents are used to check for possible manipulation of a return address coming from the traditional stack.</p> <p>In particular certain memory accesses need intercepting by Xen. In various cases the necessary emulation involves kind of replaying of the instruction. Such replaying typically involves filling and then invoking of a stub. Such a replayed instruction may raise an exceptions, which is expected and dealt with accordingly.</p> <p>Unfortunately the interaction of both of the above wasn&#39;t right: Recovery involves removal of a call frame from the (traditional) stack. The counterpart of this operation for the shadow stack was missing.</p> <p><strong>Affected:</strong> Xen</p> <p>Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET). A sub-feature of this are Shadow Stacks (CET-SS). CET-SS is a hardware feature designed to protect against Return Oriented Programming attacks. When enabled, traditional stacks holding both data and return addresses are accompanied by so called &#34;shadow stacks&#34;, holding little more than return addresses. Shadow stacks aren&#39;t writable by normal instructions, and upon function returns their contents are used to check for possible manipulation of a return address coming from the traditional stack.</p> <p>In particular certain memory accesses need intercepting by Xen. In various cases the necessary emulation involves kind of replaying of the instruction. Such replaying typically involves filling and then invoking of a stub. Such a replayed instruction may raise an exceptions, which is expected and dealt with accordingly.</p> <p>Unfortunately the interaction of both of the above wasn&#39;t right: Recovery involves removal of a call frame from the (traditional) stack. The counterpart of this operation for the shadow stack was missing.</p> https://cve.radiocsirt.org/vuln/cve-2023-46841