# Xen.

Every CVE that names Xen among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [x86 HVM hypercalls may trigger Xen bug check](https://agentprime.io/advisories/CVE-2023-46842.md)
  `CVE-2023-46842` · CVE record: Xen Xen · CVSS 6.5 Medium · Not analysed yet · Published 16 May 2024 · Tags: Memory corruption
- [x86: shadow stack vs exceptions from emulation stubs](https://agentprime.io/advisories/CVE-2023-46841.md)
  `CVE-2023-46841` · CVE record: Xen Xen · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2024
- [VT-d: Failure to quarantine devices in !HVM builds](https://agentprime.io/advisories/CVE-2023-46840.md)
  `CVE-2023-46840` · CVE record: Xen Xen · CVSS 4.1 Medium · Not analysed yet · Published 20 Mar 2024
- [pci: phantom functions assigned to incorrect contexts](https://agentprime.io/advisories/CVE-2023-46839.md)
  `CVE-2023-46839` · CVE record: Xen Xen · CVSS 5.3 Medium · Not analysed yet · Published 20 Mar 2024
- [Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.](https://agentprime.io/advisories/CVE-2024-2193.md)
  `CVE-2024-2193` · CVE record: AMD CPU and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 15 Mar 2024 · Tags: Race condition
- [arm32: The cache may not be properly cleaned/invalidated (take two)](https://agentprime.io/advisories/CVE-2023-46837.md)
  `CVE-2023-46837` · CVE record: Xen Xen · CVSS 3.3 Low · Not analysed yet · Published 5 Jan 2024 · Tags: Memory corruption
- [x86: BTC/SRSO fixes not fully effective](https://agentprime.io/advisories/CVE-2023-46836.md)
  `CVE-2023-46836` · CVE record: Xen Xen · CVSS 4.7 Medium · Not analysed yet · Published 5 Jan 2024
- [x86/AMD: mismatch in IOMMU quarantine page table levels](https://agentprime.io/advisories/CVE-2023-46835.md)
  `CVE-2023-46835` · CVE record: Xen Xen · CVSS 5.5 Medium · Not analysed yet · Published 5 Jan 2024 · Tags: Memory corruption
- [x86/AMD: Debug Mask handling](https://agentprime.io/advisories/CVE-2023-34328.md)
  `CVE-2023-34328` · CVE record: Xen Xen · CVSS 5.5 Medium · Not analysed yet · Published 5 Jan 2024
- [x86/AMD: Debug Mask handling](https://agentprime.io/advisories/CVE-2023-34327.md)
  `CVE-2023-34327` · CVE record: Xen Xen · CVSS 5.5 Medium · Not analysed yet · Published 5 Jan 2024
- [Multiple vulnerabilities in libfsimage disk handling](https://agentprime.io/advisories/CVE-2023-34325.md)
  `CVE-2023-34325` · CVE record: Xen Xen · CVSS 7.8 High · Not analysed yet · Published 5 Jan 2024 · Tags: Memory corruption
- [x86/AMD: missing IOMMU TLB flushing](https://agentprime.io/advisories/CVE-2023-34326.md)
  `CVE-2023-34326` · CVE record: Xen Xen · CVSS 7.8 High · Not analysed yet · Published 5 Jan 2024 · Tags: CWE-672
- [xenstored: A transaction conflict can crash C Xenstored](https://agentprime.io/advisories/CVE-2023-34323.md)
  `CVE-2023-34323` · CVE record: Xen Xen · CVSS 5.5 Medium · Not analysed yet · Published 5 Jan 2024 · Tags: Memory corruption
- [top-level shadow reference dropped too early for 64-bit PV guests](https://agentprime.io/advisories/CVE-2023-34322.md)
  `CVE-2023-34322` · CVE record: Xen Xen · CVSS 7.8 High · Not analysed yet · Published 5 Jan 2024 · Tags: CWE-273
- [arm32: The cache may not be properly cleaned/invalidated](https://agentprime.io/advisories/CVE-2023-34321.md)
  `CVE-2023-34321` · CVE record: Xen Xen · CVSS 3.3 Low · Not analysed yet · Published 5 Jan 2024 · Tags: Memory corruption
- [arm: Guests can trigger a deadlock on Cortex-A77](https://agentprime.io/advisories/CVE-2023-34320.md)
  `CVE-2023-34320` · CVE record: Xen Xen · No CVSS score · Not analysed yet · Published 8 Dec 2023
- [Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, a…](https://agentprime.io/advisories/CVE-2022-42336.md)
  `CVE-2022-42336` · CVE record: Xen xen · CVSS 3.3 Low · Not analysed yet · Published 17 May 2023
- [xen: x86 shadow paging arbitrary pointer dereference In environments where host assisted…](https://agentprime.io/advisories/CVE-2022-42335.md)
  `CVE-2022-42335` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 25 Apr 2023
- [x86/HVM pinned cache attributes mis-handling T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.\] To allow cachability cont…](https://agentprime.io/advisories/CVE-2022-42334.md)
  `CVE-2022-42334` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 21 Mar 2023
- [x86/HVM pinned cache attributes mis-handling T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.\] To allow cachability cont…](https://agentprime.io/advisories/CVE-2022-42333.md)
  `CVE-2022-42333` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 21 Mar 2023
- [xen: x86 shadow plus log-dirty mode use-after-free In environments where host assisted address…](https://agentprime.io/advisories/CVE-2022-42332.md)
  `CVE-2022-42332` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 21 Mar 2023
- [x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late.](https://agentprime.io/advisories/CVE-2022-42331.md)
  `CVE-2022-42331` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 21 Mar 2023
- [xen: Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g…](https://agentprime.io/advisories/CVE-2022-42330.md)
  `CVE-2022-42330` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 26 Jan 2023
- [Improper access control in xen](https://agentprime.io/advisories/CVE-2022-42327.md)
  `CVE-2022-42327` · CVE record: Xen xen · CVSS 7.1 High · Not analysed yet · Published 1 Nov 2022 · Tags: Broken access control
- [Memory leak in xen](https://agentprime.io/advisories/CVE-2022-42326.md)
  `CVE-2022-42326` · CVE record: Xen xen · CVSS 5.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [xen: Xenstore: Guests can create arbitrary number of nodes via transactions T\[his CNA…](https://agentprime.io/advisories/CVE-2022-42325.md)
  `CVE-2022-42325` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [xen: Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of…](https://agentprime.io/advisories/CVE-2022-42324.md)
  `CVE-2022-42324` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [xen: Xenstore: Cooperating guests can create arbitrary numbers of nodes T\[his CNA information…](https://agentprime.io/advisories/CVE-2022-42323.md)
  `CVE-2022-42323` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [xen: Xenstore: Cooperating guests can create arbitrary numbers of nodes T\[his CNA information…](https://agentprime.io/advisories/CVE-2022-42322.md)
  `CVE-2022-42322` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [xen: Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using…](https://agentprime.io/advisories/CVE-2022-42321.md)
  `CVE-2022-42321` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of…](https://agentprime.io/advisories/CVE-2022-42320.md)
  `CVE-2022-42320` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [xen: Xenstore: Guests can cause Xenstore to not free temporary memory When working on a…](https://agentprime.io/advisories/CVE-2022-42319.md)
  `CVE-2022-42319` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [Resource allocation without limits in xen](https://agentprime.io/advisories/CVE-2022-42318.md)
  `CVE-2022-42318` · CVE record: Xen xen · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [Resource allocation without limits in xen](https://agentprime.io/advisories/CVE-2022-42317.md)
  `CVE-2022-42317` · CVE record: Xen xen · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [Resource allocation without limits in xen](https://agentprime.io/advisories/CVE-2022-42316.md)
  `CVE-2022-42316` · CVE record: Xen xen · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [Resource allocation without limits in xen](https://agentprime.io/advisories/CVE-2022-42315.md)
  `CVE-2022-42315` · CVE record: Xen xen · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [Resource allocation without limits in xen](https://agentprime.io/advisories/CVE-2022-42314.md)
  `CVE-2022-42314` · CVE record: Xen xen · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [Resource allocation without limits in xen](https://agentprime.io/advisories/CVE-2022-42313.md)
  `CVE-2022-42313` · CVE record: Xen xen · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [Resource allocation without limits in xen](https://agentprime.io/advisories/CVE-2022-42312.md)
  `CVE-2022-42312` · CVE record: Xen xen · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [Resource allocation without limits in xen](https://agentprime.io/advisories/CVE-2022-42311.md)
  `CVE-2022-42311` · CVE record: Xen xen · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2022 · Tags: Denial of service
- [xen: Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a…](https://agentprime.io/advisories/CVE-2022-42310.md)
  `CVE-2022-42310` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [xen: Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest…](https://agentprime.io/advisories/CVE-2022-42309.md)
  `CVE-2022-42309` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 1 Nov 2022
- [lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path.](https://agentprime.io/advisories/CVE-2022-33748.md)
  `CVE-2022-33748` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping.](https://agentprime.io/advisories/CVE-2022-33747.md)
  `CVE-2022-33747` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size.](https://agentprime.io/advisories/CVE-2022-33746.md)
  `CVE-2022-33746` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 11 Oct 2022
- [xen: insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work…](https://agentprime.io/advisories/CVE-2022-33745.md)
  `CVE-2022-33745` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 26 Jul 2022
- [Linux kernel: Linux disk/nic frontends data leaks T\[his CNA information record relates to multiple…](https://agentprime.io/advisories/CVE-2022-33742.md)
  `CVE-2022-33742` · CVE record: Linux Linux and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2022
- [Linux kernel: Linux disk/nic frontends data leaks T\[his CNA information record relates to multiple…](https://agentprime.io/advisories/CVE-2022-33741.md)
  `CVE-2022-33741` · CVE record: Linux Linux and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2022
- [Linux kernel: Linux disk/nic frontends data leaks T\[his CNA information record relates to multiple…](https://agentprime.io/advisories/CVE-2022-33740.md)
  `CVE-2022-33740` · CVE record: Linux Linux and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2022
- [Linux kernel: Linux disk/nic frontends data leaks T\[his CNA information record relates to multiple…](https://agentprime.io/advisories/CVE-2022-26365.md)
  `CVE-2022-26365` · CVE record: Linux Linux and 1 more · No CVSS score · Not analysed yet · Published 5 Jul 2022
- [xen: x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for…](https://agentprime.io/advisories/CVE-2022-26362.md)
  `CVE-2022-26362` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 9 Jun 2022
- [xen: x86 pv: Insufficient care with non-coherent mappings T\[his CNA information record relates…](https://agentprime.io/advisories/CVE-2022-26364.md)
  `CVE-2022-26364` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 9 Jun 2022
- [xen: x86 pv: Insufficient care with non-coherent mappings T\[his CNA information record relates…](https://agentprime.io/advisories/CVE-2022-26363.md)
  `CVE-2022-26363` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 9 Jun 2022
- [IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.\] Certain PCI…](https://agentprime.io/advisories/CVE-2022-26361.md)
  `CVE-2022-26361` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 5 Apr 2022
- [IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.\] Certain PCI…](https://agentprime.io/advisories/CVE-2022-26360.md)
  `CVE-2022-26360` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 5 Apr 2022
- [IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.\] Certain PCI…](https://agentprime.io/advisories/CVE-2022-26359.md)
  `CVE-2022-26359` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 5 Apr 2022
- [IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.\] Certain PCI…](https://agentprime.io/advisories/CVE-2022-26358.md)
  `CVE-2022-26358` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 5 Apr 2022
- [race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide.](https://agentprime.io/advisories/CVE-2022-26357.md)
  `CVE-2022-26357` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 5 Apr 2022
- [xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation…](https://agentprime.io/advisories/CVE-2022-26356.md)
  `CVE-2022-26356` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 5 Apr 2022
- [Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up aft…](https://agentprime.io/advisories/CVE-2022-23035.md)
  `CVE-2022-23035` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 25 Jan 2022

Newest: <https://agentprime.io/advisories/technology/xen.md>
Older: <https://agentprime.io/advisories/technology/xen.md?cursor=WyIyMDIyLTAxLTI1VDEzOjQ2OjAzLjAwMDAwMFoiLCJDVkUtMjAyMi0yMzAzNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=xen&cursor=WyIyMDI0LTA1LTE2VDEzOjM5OjQyLjc3NDAwMFoiLCJDVkUtMjAyNC0zMTE0MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/xen/?cursor=WyIyMDI0LTA1LTE2VDEzOjM5OjQyLjc3NDAwMFoiLCJDVkUtMjAyNC0zMTE0MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.