nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

xen: patch with XSA-506

Browse Source 
Xen Security Advisory CVE-2026-62433 / XSA-506

              correct buffer checks for DM_OP hypercalls

Parts of the DM_OP handling code assumes the caller has provided the
required number of buffers for the given operation without any checking
being done.  As a result, certain operations might access stack
rubble as structures are possibly uninitialized.

A device model of a HVM guest can gain insight on the contents of the
Xen stack, thus possibly leaking data from other guests contexts.

https://xenbits.xen.org/xsa/advisory-506.html

Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net>
(cherry picked from commit 8b1b2b2ef2)
This commit is contained in:
Fernando Rodrigues
2026-07-19 11:58:26 +10:00
committed by github-actions[bot]
parent 5eb0d1ca04
commit a1a243c165
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
pkgs/by-name/xe/xen/package.nix
View File

@@ -402,6 +402,12 @@ stdenv.mkDerivation (finalAttrs: {
hash = "sha256-eZ8CdfzU5Ylyi6BpB4fOJh0VHfHeWa2JsRyhH+sh400=";
})
# XSA #506
(fetchpatch {
url = "https://xenbits.xenproject.org/xsa/xsa506.patch";
hash = "sha256-8unTCZE3Kh2JfqDSG5KrgRx9zL9J9pcVzeXnO5vUM0Y=";
})
# patch `libxl` to search for `qemu-system-i386` properly. (Before 4.21)
(fetchpatch {
url = "https://github.com/xen-project/xen/commit/f6281291704aa356489f4bd927cc7348a920bd01.diff?full_index=1";