description: x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.
problem types: unknown
affected:
{
vendor: Xen
product: xen
versions:
version: consult Xen advisory XSA-429, status: unknown
}
metrics:
other: [
type: unknown
content: {'description': {'description_data': [{'lang': 'eng', 'value': 'An attacker might be able to infer the contents of arbitrary host\nmemory, including memory assigned to other guests.'}]}}
]