> As a kinda-sort-maintainer of a bunch of the low-level Linux code that is all tangled up with the Xen PV stuff, I would be shocked if there isn't a PV-specifi

> As a kinda-sort-maintainer of a bunch of the low-level Linux code that is all tangled up with the Xen PV stuff, I would be shocked if there isn't a PV-specific security bug or two in there. The current bug is pv-specific. there was another one that effected me early this year[1]... I'm not saying it's bug free or anything, I'm just saying that xen PV has had fewer exploits over the last year (and over the last decade) than HVM mode or KVM. [1]xsa123 if I remember right; my blog archive is all messed up at the moment. but, for example, xsa-108, which was a big deal, was a non-issue for me because all my stuff is paravirtualized. Note, the list I'm going off of is here: http://xenbits.xen.org/xsa/ http://xenbits.xen.org/xsa/