Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

Two Xen hypervisor flaws let a malicious guest VM read and write memory of other VMs, including dom0, which has full permissions. Patches are available, but no mitigation exists, the Xen Project said on November 3. All Xen versions from 4.6 onward are vulnerable, posing a severe risk to multi-tenant cloud environments.