nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

xen: patch with XSA-494

Browse Source 
Xen Security Advisory CVE-2026-42488 / XSA-494
                               version 3

                   x86: mismatched mapcache metadata

Some shadow paging errors paths will switch the page-tables without
updating the currently running vCPU reference.  This causes a mismatch
between the loaded page-tables and the mapcache metadata which can lead
to corruption of the mapcache.

Privilege escalation, Denial of Service (DoS) affecting the entire host,
and information leaks.

https://xenbits.xen.org/xsa/advisory-494.html

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
(cherry picked from commit c8ec62ac39)
This commit is contained in:
Fernando Rodrigues
2026-06-04 14:29:42 +10:00
committed by github-actions[bot]
parent aa7b6244ec
commit 96d850eec3
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
pkgs/by-name/xe/xen/package.nix
View File

@@ -318,6 +318,12 @@ stdenv.mkDerivation (finalAttrs: {
hash = "sha256-6pGjjPjalw6TY0n9TInE3nCXNmt6BUxwy1r1xf55U7k=";
})
# XSA #494
(fetchpatch {
url = "https://xenbits.xenproject.org/xsa/xsa494-4.20.patch";
hash = "sha256-ns0s++J2adUD/HWuMiYad/g3MITs+twlMnkpFnP7T0w=";
})
# patch `libxl` to search for `qemu-system-i386` properly. (Before 4.21)
(fetchpatch {
url = "https://github.com/xen-project/xen/commit/f6281291704aa356489f4bd927cc7348a920bd01.diff?full_index=1";