Advisories · Technology

Xen.

Every CVE that names Xen among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-46842 CVE record

CVSS 6.5 Medium

x86 HVM hypercalls may trigger Xen bug check
- Xen
- Memory corruption
Not analysed yet 16 May 2024
CVE-2023-46841 CVE record

CVSS 6.5 Medium

x86: shadow stack vs exceptions from emulation stubs
- Xen
Not analysed yet 20 Mar 2024
CVE-2023-46840 CVE record

CVSS 4.1 Medium

VT-d: Failure to quarantine devices in !HVM builds
- Xen
Not analysed yet 20 Mar 2024
CVE-2023-46839 CVE record

CVSS 5.3 Medium

pci: phantom functions assigned to incorrect contexts
- Xen
Not analysed yet 20 Mar 2024
CVE-2024-2193 CVE record

CVSS 5.7 Medium

Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.
- AMD CPU
- Xen
- Race condition
Not analysed yet 15 Mar 2024
CVE-2023-46837 CVE record

CVSS 3.3 Low

arm32: The cache may not be properly cleaned/invalidated (take two)
- Xen
- Memory corruption
Not analysed yet 5 Jan 2024
CVE-2023-46836 CVE record

CVSS 4.7 Medium

x86: BTC/SRSO fixes not fully effective
- Xen
Not analysed yet 5 Jan 2024
CVE-2023-46835 CVE record

CVSS 5.5 Medium

x86/AMD: mismatch in IOMMU quarantine page table levels
- Xen
- Memory corruption
Not analysed yet 5 Jan 2024
CVE-2023-34328 CVE record

CVSS 5.5 Medium

x86/AMD: Debug Mask handling
- Xen
Not analysed yet 5 Jan 2024
CVE-2023-34327 CVE record

CVSS 5.5 Medium

x86/AMD: Debug Mask handling
- Xen
Not analysed yet 5 Jan 2024
CVE-2023-34325 CVE record

CVSS 7.8 High

Multiple vulnerabilities in libfsimage disk handling
- Xen
- Memory corruption
Not analysed yet 5 Jan 2024
CVE-2023-34326 CVE record

CVSS 7.8 High

x86/AMD: missing IOMMU TLB flushing
- Xen
- CWE-672
Not analysed yet 5 Jan 2024
CVE-2023-34323 CVE record

CVSS 5.5 Medium

xenstored: A transaction conflict can crash C Xenstored
- Xen
- Memory corruption
Not analysed yet 5 Jan 2024
CVE-2023-34322 CVE record

CVSS 7.8 High

top-level shadow reference dropped too early for 64-bit PV guests
- Xen
- CWE-273
Not analysed yet 5 Jan 2024
CVE-2023-34321 CVE record

CVSS 3.3 Low

arm32: The cache may not be properly cleaned/invalidated
- Xen
- Memory corruption
Not analysed yet 5 Jan 2024
CVE-2023-34320 CVE record

arm: Guests can trigger a deadlock on Cortex-A77
- Xen
Not analysed yet 8 Dec 2023
CVE-2022-42336 CVE record

CVSS 3.3 Low

Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, a…
- xen
Not analysed yet 17 May 2023
CVE-2022-42335 CVE record

xen: x86 shadow paging arbitrary pointer dereference In environments where host assisted…
- xen
Not analysed yet 25 Apr 2023
CVE-2022-42334 CVE record

x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability cont…
- xen
Not analysed yet 21 Mar 2023
CVE-2022-42333 CVE record

x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability cont…
- xen
Not analysed yet 21 Mar 2023
CVE-2022-42332 CVE record

xen: x86 shadow plus log-dirty mode use-after-free In environments where host assisted address…
- xen
Not analysed yet 21 Mar 2023
CVE-2022-42331 CVE record

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late.
- xen
Not analysed yet 21 Mar 2023
CVE-2022-42330 CVE record

xen: Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g…
- xen
Not analysed yet 26 Jan 2023
CVE-2022-42327 CVE record

CVSS 7.1 High

Improper access control in xen
- xen
- Broken access control
Not analysed yet 1 Nov 2022
CVE-2022-42326 CVE record

CVSS 5.5 Medium

Memory leak in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42325 CVE record

xen: Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-42324 CVE record

xen: Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-42323 CVE record

xen: Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-42322 CVE record

xen: Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-42321 CVE record

xen: Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-42320 CVE record

xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-42319 CVE record

xen: Xenstore: Guests can cause Xenstore to not free temporary memory When working on a…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-42318 CVE record

CVSS 6.5 Medium

Resource allocation without limits in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42317 CVE record

CVSS 6.5 Medium

Resource allocation without limits in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42316 CVE record

CVSS 6.5 Medium

Resource allocation without limits in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42315 CVE record

CVSS 6.5 Medium

Resource allocation without limits in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42314 CVE record

CVSS 6.5 Medium

Resource allocation without limits in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42313 CVE record

CVSS 6.5 Medium

Resource allocation without limits in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42312 CVE record

CVSS 6.5 Medium

Resource allocation without limits in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42311 CVE record

CVSS 6.5 Medium

Resource allocation without limits in xen
- xen
- Denial of service
Not analysed yet 1 Nov 2022
CVE-2022-42310 CVE record

xen: Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-42309 CVE record

xen: Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest…
- xen
Not analysed yet 1 Nov 2022
CVE-2022-33748 CVE record

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path.
- xen
Not analysed yet 11 Oct 2022
CVE-2022-33747 CVE record

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping.
- xen
Not analysed yet 11 Oct 2022
CVE-2022-33746 CVE record

P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size.
- xen
Not analysed yet 11 Oct 2022
CVE-2022-33745 CVE record

xen: insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work…
- xen
Not analysed yet 26 Jul 2022
CVE-2022-33742 CVE record

Linux kernel: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple…
- Linux kernel
- xen
Not analysed yet 5 Jul 2022
CVE-2022-33741 CVE record

Linux kernel: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple…
- Linux kernel
- xen
Not analysed yet 5 Jul 2022
CVE-2022-33740 CVE record

Linux kernel: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple…
- Linux kernel
- xen
Not analysed yet 5 Jul 2022
CVE-2022-26365 CVE record

Linux kernel: Linux disk/nic frontends data leaks T[his CNA information record relates to multiple…
- Linux kernel
- xen
Not analysed yet 5 Jul 2022
CVE-2022-26362 CVE record

xen: x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for…
- xen
Not analysed yet 9 Jun 2022
CVE-2022-26364 CVE record

xen: x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates…
- xen
Not analysed yet 9 Jun 2022
CVE-2022-26363 CVE record

xen: x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates…
- xen
Not analysed yet 9 Jun 2022
CVE-2022-26361 CVE record

IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI…
- xen
Not analysed yet 5 Apr 2022
CVE-2022-26360 CVE record

IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI…
- xen
Not analysed yet 5 Apr 2022
CVE-2022-26359 CVE record

IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI…
- xen
Not analysed yet 5 Apr 2022
CVE-2022-26358 CVE record

IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI…
- xen
Not analysed yet 5 Apr 2022
CVE-2022-26357 CVE record

race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide.
- xen
Not analysed yet 5 Apr 2022
CVE-2022-26356 CVE record

xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation…
- xen
Not analysed yet 5 Apr 2022
CVE-2022-23035 CVE record

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up aft…
- xen
Not analysed yet 25 Jan 2022