{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-20T23:09:42.560","vulnerabilities":[{"cve":{"id":"CVE-2024-31146","sourceIdentifier":"security@xen.org","published":"2024-09-25T11:15:12.220","lastModified":"2026-01-05T18:46:00.983","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"When multiple devices share resources and one of them is to be passed\nthrough to a guest, security of the entire system and of respective\nguests individually cannot really be guaranteed without knowing\ninternals of any of the involved guests.  Therefore such a configuration\ncannot really be security-supported, yet making that explicit was so far\nmissing.\n\nResources the sharing of which is known to be problematic include, but\nare not limited to\n- - PCI Base Address Registers (BARs) of multiple devices mapping to the\n  same page (4k on x86),\n- - INTx lines."},{"lang":"es","value":"Cuando varios dispositivos comparten recursos y uno de ellos debe pasarse a un invitado, la seguridad de todo el sistema y de los respectivos invitados individualmente no se puede garantizar realmente sin conocer los detalles internos de cualquiera de los invitados involucrados. Por lo tanto, una configuración de este tipo no puede realmente ser compatible con la seguridad, aunque hasta ahora no se había hecho explícita. Los recursos cuyo uso compartido se sabe que es problemático incluyen, entre otros: - Registros de dirección base PCI (BAR) de varios dispositivos que se asignan a la misma página (4k en x86), - Líneas INTx."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":6.0}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:*","matchCriteriaId":"BFA1950D-1D9F-4401-AA86-CF3028EFD286"}]}]}],"references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-461.html","source":"security@xen.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/08/14/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-461.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}}]}