CVE-2024-31142

HIGH 7.5CVE-2024-31142 · Published 16/05/2024 · updated 17/06/2026

In short

CVE-2024-31142 is a HIGH (CVSS 7.5) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 17.4%, higher than 97.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used. XSA-434 (Speculative Return Stack Overflow) uses the same infrastructure, so is equally impacted. For more details, see: https://xenbits.xen.org/xsa/advisory-407.html https://xenbits.xen.org/xsa/advisory-434.html

References

xenbits.xenproject.org/xsa/advisory-455.html · Patch
xenbits.xen.org/xsa/advisory-455.html · Patch
lists.fedoraproject.org/archives/list/[email protected]/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3 · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/RYAZ7P6YFJ2E3FHKAGIKHWS46KYMMTZH · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free