# xen.

Every CVE that names xen among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [xen: A PV guest could DoS Xen while unmapping a grant To address XSA-380…](https://agentprime.io/advisories/CVE-2022-23034.md)
  `CVE-2022-23034` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 25 Jan 2022
- [xen: arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one…](https://agentprime.io/advisories/CVE-2022-23033.md)
  `CVE-2022-23033` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 25 Jan 2022
- [Xen: grant table v2 status pages may remain accessible after de-allocation (take two) Guest…](https://agentprime.io/advisories/CVE-2021-28703.md)
  `CVE-2021-28703` · CVE record: Xen Project Xen · No CVSS score · Not analysed yet · Published 7 Dec 2021
- [issues with partially successful P2M updates on x86 T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.\] x86 HVM and PVH gu…](https://agentprime.io/advisories/CVE-2021-28709.md)
  `CVE-2021-28709` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 24 Nov 2021
- [xen: PoD operations on misaligned GFNs T\[his CNA information record relates to multiple CVEs…](https://agentprime.io/advisories/CVE-2021-28708.md)
  `CVE-2021-28708` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 24 Nov 2021
- [xen: PoD operations on misaligned GFNs T\[his CNA information record relates to multiple CVEs…](https://agentprime.io/advisories/CVE-2021-28707.md)
  `CVE-2021-28707` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 24 Nov 2021
- [guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrat…](https://agentprime.io/advisories/CVE-2021-28706.md)
  `CVE-2021-28706` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 24 Nov 2021
- [issues with partially successful P2M updates on x86 T\[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.\] x86 HVM and PVH gu…](https://agentprime.io/advisories/CVE-2021-28705.md)
  `CVE-2021-28705` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 24 Nov 2021
- [xen: PoD operations on misaligned GFNs T\[his CNA information record relates to multiple CVEs…](https://agentprime.io/advisories/CVE-2021-28704.md)
  `CVE-2021-28704` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 24 Nov 2021
- [xen: certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons…](https://agentprime.io/advisories/CVE-2021-28710.md)
  `CVE-2021-28710` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 21 Nov 2021
- [PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR").](https://agentprime.io/advisories/CVE-2021-28702.md)
  `CVE-2021-28702` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 6 Oct 2021
- [xen: Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain…](https://agentprime.io/advisories/CVE-2021-28701.md)
  `CVE-2021-28701` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 8 Sept 2021
- [xen: IOMMU page mapping issues on x86 T\[his CNA information record relates to multiple CVEs…](https://agentprime.io/advisories/CVE-2021-28696.md)
  `CVE-2021-28696` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 27 Aug 2021
- [xen: IOMMU page mapping issues on x86 T\[his CNA information record relates to multiple CVEs…](https://agentprime.io/advisories/CVE-2021-28695.md)
  `CVE-2021-28695` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 27 Aug 2021
- [xen: IOMMU page mapping issues on x86 T\[his CNA information record relates to multiple CVEs…](https://agentprime.io/advisories/CVE-2021-28694.md)
  `CVE-2021-28694` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 27 Aug 2021
- [xen: grant table v2 status pages may remain accessible after de-allocation Guest get permitted…](https://agentprime.io/advisories/CVE-2021-28697.md)
  `CVE-2021-28697` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 27 Aug 2021
- [xen: long running loops in grant table handling In order to properly monitor resource use…](https://agentprime.io/advisories/CVE-2021-28698.md)
  `CVE-2021-28698` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 27 Aug 2021
- [inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status.](https://agentprime.io/advisories/CVE-2021-28699.md)
  `CVE-2021-28699` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 27 Aug 2021
- [xen: xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator…](https://agentprime.io/advisories/CVE-2021-28700.md)
  `CVE-2021-28700` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 27 Aug 2021
- [xen: xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g…](https://agentprime.io/advisories/CVE-2021-28693.md)
  `CVE-2021-28693` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 30 Jun 2021
- [xen: inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to…](https://agentprime.io/advisories/CVE-2021-28692.md)
  `CVE-2021-28692` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 30 Jun 2021
- [xen: x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX…](https://agentprime.io/advisories/CVE-2021-28690.md)
  `CVE-2021-28690` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 29 Jun 2021
- [HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions.](https://agentprime.io/advisories/CVE-2021-28687.md)
  `CVE-2021-28687` · CVE record: Xen xen · No CVSS score · Not analysed yet · Published 11 Jun 2021
- [Xen: x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV…](https://agentprime.io/advisories/CVE-2021-28689.md)
  `CVE-2021-28689` · CVE record: Xen Xen · No CVSS score · Not analysed yet · Published 11 Jun 2021

Newest: <https://agentprime.io/advisories/technology/xen.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=xen&cursor=WyIyMDIyLTAxLTI1VDEzOjQ2OjAzLjAwMDAwMFoiLCJDVkUtMjAyMi0yMzAzNSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/xen/?cursor=WyIyMDIyLTAxLTI1VDEzOjQ2OjAzLjAwMDAwMFoiLCJDVkUtMjAyMi0yMzAzNSJd>. Everything for agents: <https://agentprime.io/llms.txt>.