CVE-2020-25602

An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.

• CWE-755

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/
• https://security.gentoo.org/glsa/202011-06Third Party Advisory
• https://www.debian.org/security/2020/dsa-4769Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-333.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.htmlThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/
• https://security.gentoo.org/glsa/202011-06Third Party Advisory
• https://www.debian.org/security/2020/dsa-4769Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-333.htmlPatch, Vendor Advisory

Published

Sep 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25597An issue was discovered in Xen through 4.14.x. There is mish…6.5
• CVE-2020-25598An issue was discovered in Xen 4.14.x. There is a missing un…5.5
• CVE-2020-25599An issue was discovered in Xen through 4.14.x. There are evt…7
• CVE-2020-2560Vulnerability in the Siebel UI Framework product of Oracle S…4.7
• CVE-2020-25600An issue was discovered in Xen through 4.14.x. Out of bounds…5.5
• CVE-2020-25601An issue was discovered in Xen through 4.14.x. There is a la…5.5
• CVE-2020-25603An issue was discovered in Xen through 4.14.x. There are mis…7.8
• CVE-2020-25604An issue was discovered in Xen through 4.14.x. There is a ra…4.7
• CVE-2020-25605Cleartext transmission of sensitive information in Agora Vid…5.9
• CVE-2020-25606The AWV component of Mitel MiCollab before 9.2 could allow a…6.1
• CVE-2020-25608The SAS portal of Mitel MiCollab before 9.2 could allow an a…7.2
• CVE-2020-25609The NuPoint Messenger Portal of Mitel MiCollab before 9.2 co…5.4