A component of the Xen hypervisor that handles platform operations acquires a system‑wide lock without guaranteeing fairness. For certain operations, the lock is taken before the access control checks run, creating a race window. An attacker can force the lock to be granted early, then proceed to perform privileged platform actions that would normally be denied. This flaw is an access‑control weakness (CWE‑284) and can allow a malicious domain to modify kernel configuration or execute privileged code, compromising confidentiality, integrity, and availability.

The Xen hypervisor product is affected. No specific affected version range is disclosed in the CNA data.

The CVSS score of 8.8 indicates a high severity issue, while the EPSS score of less than 1% shows that exploitation is currently unlikely. The vulnerability is not listed in CISA’s KEV catalog, suggesting a limited exploitation footprint. Based on the description, it is inferred that the likely attack vector requires the attacker to have the ability to submit platform operation requests to the control domain, implying a local adversary or one with access to an unmanaged domain. The exploitation requires precise race conditions, but does not require code execution beyond privileged domain access.