CVE-2023-46840

MEDIUM

Xen - Info Disclosure

Title source: llm
STIX 2.1

Description

Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen.

Scores

CVSS v3 4.1
EPSS 0.0007
EPSS Percentile 22.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-670
Status published
Products (2)
fedoraproject/fedora 39
xen/xen 4.17
Published Mar 20, 2024
Tracked Since Feb 18, 2026