The Xen hypervisor’s updated Zenbleed protection contains a logic error that flips the intended condition. As a result, the workaround that disables the vulnerable CPU state register is applied when it should not, and omitted when it is required. This failure allows the Zenbleed side‑channel to remain exploitable, potentially exposing secrets from the guest or host environment. The flaw is an implementation error rather than a new exploit vector, but it removes a critical defense against a known CPU vulnerability.

Xen hypervisor. Product: Xen. No specific version information provided.

The CVSS score is 9.8, but the EPSS score is <1% and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed public exploits. The likely attack scenario would involve an attacker who can influence Xen configuration or kernel execution to trigger the inverted conditional, thereby nullifying the mitigation. Because the flaw disables an existing protection rather than introducing a new pathway for code execution, the available exploitation surface remains limited to those who can manipulate Xen, yet the potential impact on confidentiality is significant. The overall risk is therefore high, with a strong recommendation to correct the defect as soon as a patch or microcode update is available.