CVE-2020-25596

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.

• CWE-74

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/
• https://security.gentoo.org/glsa/202011-06Third Party Advisory
• https://www.debian.org/security/2020/dsa-4769Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-339.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/
• https://security.gentoo.org/glsa/202011-06Third Party Advisory
• https://www.debian.org/security/2020/dsa-4769Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-339.htmlPatch, Vendor Advisory

Published

Sep 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25590Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-25591Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-25592In SaltStack Salt through 3002, salt-netapi improperly valid…9.8
• CVE-2020-25593Acronis True Image through 2021 on macOS allows local privil…6.7
• CVE-2020-25594HashiCorp Vault and Vault Enterprise allowed for enumeration…5.3
• CVE-2020-25595An issue was discovered in Xen through 4.14.x. The PCI passt…7.8
• CVE-2020-25597An issue was discovered in Xen through 4.14.x. There is mish…6.5
• CVE-2020-25598An issue was discovered in Xen 4.14.x. There is a missing un…5.5
• CVE-2020-25599An issue was discovered in Xen through 4.14.x. There are evt…7
• CVE-2020-2560Vulnerability in the Siebel UI Framework product of Oracle S…4.7
• CVE-2020-25600An issue was discovered in Xen through 4.14.x. Out of bounds…5.5
• CVE-2020-25601An issue was discovered in Xen through 4.14.x. There is a la…5.5