Xen Security Advisory 495 v2 (CVE-2026-42493) - x86 shadow paging is deprecated

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

            Xen Security Advisory CVE-2026-42493 / XSA-495
                               version 2

                    x86 shadow paging is deprecated

UPDATES IN VERSION 2
====================

Updated the patch for staging with further CI adjustements.

Public release.

ISSUE DESCRIPTION
=================

Addressing certain issues, in particular related to operations which may
take excessively long and therefore would need preemption, has turned out
overly costly.  Since alternatives (HVM/PVH: HAP, PV: shim) are commonly
available, the decision was to deprecate the functionality, while still
retaining it for people to use at their own (security) risk.  Memory-wise
small enough guests may still be okay to run.

IMPACT
======

An unprivileged guest may be able to cause Denial of Service (DoS)
affecting the entire host.

VULNERABLE SYSTEMS
==================

All x86 systems with builds of Xen having SHADOW_PAGING=y are affected.
Note that prior to Xen 4.7 this control didn't exist, and all builds of
Xen would be affected.  (Strictly speaking Xen 4.6 had a different, harder
to use mechanism to disable shadow paging support: One could pass
"shadow-paging=n" on the make command line.)

MITIGATION
==========

Running HVM and PVH in Hardware Assisted Paging (HAP) mode will avoid this
vulnerability.

There's no mitigation available for PV guests.  This is because shadow
mode, if support is enabled in the hypervisor, could be engaged at any
time.  Note that without shadow mode built into Xen, guests not properly
dealing with L1TF will simply be crashed instead.

RESOLUTION
==========

Applying the appropriate attached patch documents this issue.

Note that patches for released versions are generally prepared to
apply to the stable branches, and may not apply cleanly to the most
recent release tarball.  Downstreams are encouraged to update to the
tip of the stable branch before applying these patches.

xsa495.patch           xen-unstable - Xen 4.22.0
xsa495-4.21.patch      Xen 4.21.x
xsa495-4.20.patch      Xen 4.20.x - Xen 4.19.x
xsa495-4.18.patch      Xen 4.18.x
xsa495-4.17.patch      Xen 4.17.x

$ sha256sum xsa495*
949624ce241ddc455c43cdde0ff045cc5fdf29b69f06f7079fa8f1d2400e1d9d  xsa495.patch
bb1fea4b49840b81a1a7ca86124e308f23edd6eb078857d44d9ebaf1b352b374  xsa495-4.17.patch
06f2c862df85a17b9dc1d4a0df42cadb97e24b7033c070c9ad74ad72d278af0e  xsa495-4.18.patch
bffa5816be9ddf0fabec0509f2b74e30a5dd0e5429a3b7919e304150cb5091f2  xsa495-4.20.patch
7092cf37dbcfecc9aa6bf9a2836ed70f48f52bccb9630e94c89d2afe120b47f5  xsa495-4.21.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of patches or mitigations is NOT permitted (except where
all the affected systems and VMs are administered and used only by
organisations which are members of the Xen Project Security Issues
Predisclosure List).  Specifically, deployment on public cloud systems
is NOT permitted.

This is because switching HVM or PVH guests from shadow to HAP mode is a
guest noticeable change, while for PV guests the lack of shadow mode is
noticeable because they then cannot be migrated anymore, and guests not
properly fixed for L1TF would be forcibly crashed.

Deployment is permitted only AFTER the embargo ends.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----

iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmpomqUMHHBncEB4ZW4u
b3JnAAoJEIP+FMlX6CvZH9wH/2EYJsV5YVdJsoQSlG94dqOR7IDPEI2I17wUVSoG
OK6BaqaejA1SHJbt0/wSkhJ9er+1UHzgr61S7EnE813mugu7T9nwTku1/++4DB9O
V/ID/NZzWwGJ2EjCHGrVTPZvmxMmVBGZs3bex00xrQ83y97D3TfmCRH0k6ip7sUh
kKSmdvTdlnODuV1+3KT09RIpDvOjVGXLpnd22++0CcT0eFoOrn0nH2dgdUw/grTf
7ye6pGcj2xViznw7FDJnXG4XOAC+wIBMX9HJK6rMOFR9P2DFUxUEcYVN+DlzR67h
3Mejc9U4Ll+65RoZbI01lmpnpqEJ33kPRGkwzA0CJmkF8wQ=
=evRY
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa495.patch"
Content-Disposition: attachment; filename="xsa495.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa495-4.17.patch"
Content-Disposition: attachment; filename="xsa495-4.17.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa495-4.18.patch"
Content-Disposition: attachment; filename="xsa495-4.18.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa495-4.20.patch"
Content-Disposition: attachment; filename="xsa495-4.20.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa495-4.21.patch"
Content-Disposition: attachment; filename="xsa495-4.21.patch"
Content-Transfer-Encoding: base64
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--=separator--