- Engineer — Act: VM isolation is completely broken on all Xen ≥4.6: a malicious guest can read and write memory of any co-resident VM, including dom0. No mitigation exists — patch to the fixed Xen release immediately; treat any multi-tenant Xen host as potentially compromised if untrusted VMs run on it.
- SOC/IR — Skip
- Leader — Plan: If your environment or any IaaS vendor you rely on runs Xen-based hypervisors (Citrix, legacy AWS, XCP-ng), verify patching timelines this quarter — a compromised guest VM gaining full dom0 access could break tenant-data isolation and trigger disclosure obligations.