Advisories · Technology
Xen.
Every CVE that names Xen among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.4 Medium
arbitrary read/write via grant copy
- Xen
- CWE-693
- CVSS 4.4 Medium
arbitrary read/write via grant copy
- Xen
- CWE-704
- CVSS 4.7 Medium
gnttab: cache-flush handling may cause page reference leak
- Xen
- Denial of service
- CVSS 7.5 High
Arm: multiple issues with GNTTABOP_cache_flush
- Xen
- Memory corruption
- CVSS 7.5 High
Arm: multiple issues with GNTTABOP_cache_flush
- Xen
- Memory corruption
- CVSS 5.5 Medium
VMX: VMentry failure with branch tracing and blocked states
- Xen
- Memory corruption
- CVSS 8.8 High
grant-table: double version change race
- Xen
- Race condition
- CVSS 8.8 High
x86: XPTI may break on huge-memory systems
- Xen
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
x86/AMD: ineffectual Zenbleed workaround
- Xen
- CWE-670
- CVSS 5.5 Medium
Xenstore: Guests can crash xenstored during Live Update
- Xen
- Memory corruption
- CVSS 4.3 Medium
Unconditionally do TLB flushing ahead of page scrubbing
- Xen
- CWE-664
- CVSS 8.8 High
x86: improper handling of HVM emulation return codes
- Xen
- Memory corruption
- CVSS 6.5 Medium
x86: DMs may cause mem leak by IRQ binding
- Xen
- Race condition
- CVSS 5.3 Medium
PoD: Don't try to reclaim special pages
- Xen
- Memory corruption
- CVSS 7.3 High
correct buffer checks for DM_OP hypercalls
- Xen
- CWE-665
- CVSS 7.3 High
evtchn: Race between FIFO expand and reset
- Xen
- Race condition
- CVSS 7.5 High
Viridian STIMER division by zero
- Xen
- Denial of service
- CVSS 7.5 High
x86: Out-of-bounds read in vRTC emulation
- Xen
- Race condition
- CVSS 6.5 Medium
vNUMA domain cleanup may race other operations
- Xen
- Race condition
- CVSS 6.5 Medium
grant-table: version change racing with other operations
- Xen
- Race condition
- CVSS 6.5 Medium
grant-table: version change racing with other operations
- Xen
- Race condition
- CVSS 7.8 High
grant-table: type confusion in grant-copy
- Xen
- Race condition
- CVSS 8.8 High
sysctl and platform-op locks open to abuse
- Xen
- Broken access control
- CWE-305
- CVSS 8.8 High
sysctl and platform-op locks open to abuse
- Xen
- CWE-412
- CWE-667
- CVSS 5.5 Medium
buffer overruns in libfsimage iso9660 handling
- Xen
- CWE-20
- CVSS 5.5 Medium
buffer overruns in libfsimage iso9660 handling
- Xen
- CWE-130
- CVSS 5.5 Medium
buffer overruns in libfsimage iso9660 handling
- Xen
- CWE-130
- CVSS 5.5 Medium
buffer overruns in libfsimage iso9660 handling
- Xen
- Memory corruption
- CVSS 6.1 Medium
buffer overruns in libfsimage iso9660 handling
- Xen
- Memory corruption
- CVSS 7.5 High
vIRQ event channel binding may break Xenstore
- Xen
- CWE-459
- CVSS 7.5 High
x86 shadow paging is deprecated
- Xen
- Denial of service
- CVSS 8.1 High
x86: mismatched mapcache metadata
- Xen
- Memory corruption
- CVSS 6.5 Medium
domctl lock open to abuse
- Xen
- CWE-667
- CVSS 5.3 Medium
domctl lock open to abuse
- Xen
- CWE-667
- CVSS 7.9 High
x86 HVM I/O port list traversal
- Xen
- Race condition
- CVSS 7.8 High
grant table v2 race in status page mapping
- Xen
- Race condition
- CVSS 6.5 Medium
Xenstored DoS via XS_RESET_WATCHES command
- Xen
- Denial of service
- CVSS 7.1 High
Xenstored DoS by unprivileged domain
- Xen
- Denial of service
- CVSS 7.8 High
Use after free of paging structures in EPT
- Xen
- Race condition
- CVSS 2.9 Low
x86: incomplete IBPB for vCPU isolation
- Xen
- CWE-665
- CWE-693
- CVSS 8.8 High
x86: buffer overrun with shadow paging + tracing
- Xen
- Memory corruption
- CVSS 7.5 High
Incorrect removal of permissions on PCI device unplug
- Xen
- CWE-672
- CVSS 7.5 High
x86: Incorrect input sanitisation in Viridian hypercalls
- Xen
- Memory corruption
- CVSS 7.5 High
x86: Incorrect input sanitisation in Viridian hypercalls
- Xen
- Memory corruption
- CVSS 7.5 High
Arm issues with page refcounting
- Xen
- Race condition
- CVSS 7.5 High
Arm issues with page refcounting
- Xen
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Mutiple vulnerabilities in the Viridian interface
- Xen
- CWE-366
- CVSS 9.8 CriticalCritical · CVSS 9+
Mutiple vulnerabilities in the Viridian interface
- Xen
- CWE-395
- CVSS 9.8 CriticalCritical · CVSS 9+
Mutiple vulnerabilities in the Viridian interface
- Xen
- CWE-395
- CVSS 7.5 High
deadlock potential with VT-d and legacy PCI device pass-through
- Xen
- Denial of service
- CVSS 4.3 Medium
x86: Incorrect stubs exception handling for flags recovery
- Xen
- CWE-755
- CVSS 3.8 Low
Xapi: Metadata injection attack against backup/restore functionality
- Xen
- CVSS 4.7 Medium
CVE-2024-2201
- Xen
- CVSS 5.5 Medium
libxl leaks data to PVH guests via ACPI tables
- Xen
- Broken access control
- CVSS 6.5 Medium
Deadlock in x86 HVM standard VGA handling
- Xen
- CWE-667
- CVSS 7.3 High
x86: Deadlock in vlapic_error()
- Xen
- Information disclosure
- CVSS 7.5 High
PCI device pass-through with shared resources
- Xen
- Denial of service
- CVSS 7.5 High
error handling in x86 IOMMU identity mapping
- Xen
- Denial of service
- CVSS 7.5 High
double unlock in x86 guest IRQ handling
- Xen
- CWE-832
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
x86: Incorrect logic for BTC/SRSO mitigations
- Xen
- CWE-693