Claude Identifies Xen Dual VM Escape Vulnerabilities; No Official Patch Path for Versions 4.6 to 4.16
Xen has disclosed two critical grant-copy vulnerabilities that let a malicious VM bypass isolation and arbitrarily read or write the memory of other VMs on the same host, including dom0. Versions 4.6 through 4.16 are affected, and 4.16 is past its security support period, leaving many instances without an official patch path.