Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM’s Memory

Two flaws in the Xen hypervisor allow a malicious guest virtual machine to read and write the memory of other VMs on the same host, including dom0, The Hacker News reports. The Xen Project released patches on November 3 and said there is no known mitigation; all Xen versions from 4.6 onward are vulnerable.