agentprime: xen

agentprime: xenEvery new CVE for xen.https://agentprime.io/CVE-2026-102704: arbitrary read/write via grant copyhttps://agentprime.io/advisories/CVE-2026-102704/https://agentprime.io/advisories/CVE-2026-102704/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 10:30:00 GMTCVECVE-2026-102703: arbitrary read/write via grant copyhttps://agentprime.io/advisories/CVE-2026-102703/https://agentprime.io/advisories/CVE-2026-102703/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 10:30:00 GMTCVECVE-2026-102700: gnttab: cache-flush handling may cause page reference leakhttps://agentprime.io/advisories/CVE-2026-102700/https://agentprime.io/advisories/CVE-2026-102700/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:45:27 GMTCVECVE-2026-102702: Arm: multiple issues with GNTTABOP_cache_flushhttps://agentprime.io/advisories/CVE-2026-102702/https://agentprime.io/advisories/CVE-2026-102702/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:45:13 GMTCVECVE-2026-102699: Arm: multiple issues with GNTTABOP_cache_flushhttps://agentprime.io/advisories/CVE-2026-102699/https://agentprime.io/advisories/CVE-2026-102699/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:45:13 GMTCVECVE-2026-79611: VMX: VMentry failure with branch tracing and blocked stateshttps://agentprime.io/advisories/CVE-2026-79611/https://agentprime.io/advisories/CVE-2026-79611/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:44:56 GMTCVECVE-2026-79610: grant-table: double version change racehttps://agentprime.io/advisories/CVE-2026-79610/https://agentprime.io/advisories/CVE-2026-79610/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:44:42 GMTCVECVE-2026-79609: x86: XPTI may break on huge-memory systemshttps://agentprime.io/advisories/CVE-2026-79609/https://agentprime.io/advisories/CVE-2026-79609/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:44:24 GMTCVECVE-2026-79608: x86/AMD: ineffectual Zenbleed workaroundhttps://agentprime.io/advisories/CVE-2026-79608/https://agentprime.io/advisories/CVE-2026-79608/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:44:08 GMTCVEcriticalCVE-2026-79607: Xenstore: Guests can crash xenstored during Live Updatehttps://agentprime.io/advisories/CVE-2026-79607/https://agentprime.io/advisories/CVE-2026-79607/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:43:43 GMTCVECVE-2026-79603: Unconditionally do TLB flushing ahead of page scrubbinghttps://agentprime.io/advisories/CVE-2026-79603/https://agentprime.io/advisories/CVE-2026-79603/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 12:11:21 GMTCVECVE-2026-79602: x86: improper handling of HVM emulation return codeshttps://agentprime.io/advisories/CVE-2026-79602/https://agentprime.io/advisories/CVE-2026-79602/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 12:11:08 GMTCVECVE-2026-62437: x86: DMs may cause mem leak by IRQ bindinghttps://agentprime.io/advisories/CVE-2026-62437/https://agentprime.io/advisories/CVE-2026-62437/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 12:10:52 GMTCVECVE-2026-62434: PoD: Don't try to reclaim special pageshttps://agentprime.io/advisories/CVE-2026-62434/https://agentprime.io/advisories/CVE-2026-62434/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:33:08 GMTCVECVE-2026-62433: correct buffer checks for DM_OP hypercallshttps://agentprime.io/advisories/CVE-2026-62433/https://agentprime.io/advisories/CVE-2026-62433/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:32:59 GMTCVECVE-2026-62432: evtchn: Race between FIFO expand and resethttps://agentprime.io/advisories/CVE-2026-62432/https://agentprime.io/advisories/CVE-2026-62432/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:32:52 GMTCVECVE-2026-62431: Viridian STIMER division by zerohttps://agentprime.io/advisories/CVE-2026-62431/https://agentprime.io/advisories/CVE-2026-62431/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:32:43 GMTCVECVE-2026-62430: x86: Out-of-bounds read in vRTC emulationhttps://agentprime.io/advisories/CVE-2026-62430/https://agentprime.io/advisories/CVE-2026-62430/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:32:33 GMTCVECVE-2026-62429: vNUMA domain cleanup may race other operationshttps://agentprime.io/advisories/CVE-2026-62429/https://agentprime.io/advisories/CVE-2026-62429/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:32:24 GMTCVECVE-2026-62436: grant-table: version change racing with other operationshttps://agentprime.io/advisories/CVE-2026-62436/https://agentprime.io/advisories/CVE-2026-62436/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:32:16 GMTCVECVE-2026-62435: grant-table: version change racing with other operationshttps://agentprime.io/advisories/CVE-2026-62435/https://agentprime.io/advisories/CVE-2026-62435/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:32:16 GMTCVECVE-2026-62428: grant-table: type confusion in grant-copyhttps://agentprime.io/advisories/CVE-2026-62428/https://agentprime.io/advisories/CVE-2026-62428/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:32:07 GMTCVECVE-2026-62427: sysctl and platform-op locks open to abusehttps://agentprime.io/advisories/CVE-2026-62427/https://agentprime.io/advisories/CVE-2026-62427/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:57 GMTCVECVE-2026-62426: sysctl and platform-op locks open to abusehttps://agentprime.io/advisories/CVE-2026-62426/https://agentprime.io/advisories/CVE-2026-62426/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:57 GMTCVECVE-2026-62425: buffer overruns in libfsimage iso9660 handlinghttps://agentprime.io/advisories/CVE-2026-62425/https://agentprime.io/advisories/CVE-2026-62425/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:41 GMTCVECVE-2026-62424: buffer overruns in libfsimage iso9660 handlinghttps://agentprime.io/advisories/CVE-2026-62424/https://agentprime.io/advisories/CVE-2026-62424/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:41 GMTCVECVE-2026-62423: buffer overruns in libfsimage iso9660 handlinghttps://agentprime.io/advisories/CVE-2026-62423/https://agentprime.io/advisories/CVE-2026-62423/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:41 GMTCVECVE-2026-42495: buffer overruns in libfsimage iso9660 handlinghttps://agentprime.io/advisories/CVE-2026-42495/https://agentprime.io/advisories/CVE-2026-42495/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:41 GMTCVECVE-2026-42494: buffer overruns in libfsimage iso9660 handlinghttps://agentprime.io/advisories/CVE-2026-42494/https://agentprime.io/advisories/CVE-2026-42494/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:41 GMTCVECVE-2026-42492: vIRQ event channel binding may break Xenstorehttps://agentprime.io/advisories/CVE-2026-42492/https://agentprime.io/advisories/CVE-2026-42492/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:28 GMTCVECVE-2026-42493: x86 shadow paging is deprecatedhttps://agentprime.io/advisories/CVE-2026-42493/https://agentprime.io/advisories/CVE-2026-42493/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:31:11 GMTCVECVE-2026-42488: x86: mismatched mapcache metadatahttps://agentprime.io/advisories/CVE-2026-42488/https://agentprime.io/advisories/CVE-2026-42488/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 13:47:23 GMTCVECVE-2026-42490: domctl lock open to abusehttps://agentprime.io/advisories/CVE-2026-42490/https://agentprime.io/advisories/CVE-2026-42490/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 13:47:13 GMTCVECVE-2026-42489: domctl lock open to abusehttps://agentprime.io/advisories/CVE-2026-42489/https://agentprime.io/advisories/CVE-2026-42489/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 13:47:13 GMTCVECVE-2026-42487: x86 HVM I/O port list traversalhttps://agentprime.io/advisories/CVE-2026-42487/https://agentprime.io/advisories/CVE-2026-42487/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 13:46:53 GMTCVECVE-2026-23558: grant table v2 race in status page mappinghttps://agentprime.io/advisories/CVE-2026-23558/https://agentprime.io/advisories/CVE-2026-23558/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 12:49:54 GMTCVECVE-2026-23557: Xenstored DoS via XS_RESET_WATCHES commandhttps://agentprime.io/advisories/CVE-2026-23557/https://agentprime.io/advisories/CVE-2026-23557/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 12:49:42 GMTCVECVE-2026-23555: Xenstored DoS by unprivileged domainhttps://agentprime.io/advisories/CVE-2026-23555/https://agentprime.io/advisories/CVE-2026-23555/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Mar 2026 06:57:07 GMTCVECVE-2026-23554: Use after free of paging structures in EPThttps://agentprime.io/advisories/CVE-2026-23554/https://agentprime.io/advisories/CVE-2026-23554/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Mar 2026 06:56:52 GMTCVECVE-2026-23553: x86: incomplete IBPB for vCPU isolationhttps://agentprime.io/advisories/CVE-2026-23553/https://agentprime.io/advisories/CVE-2026-23553/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Jan 2026 15:33:44 GMTCVECVE-2025-58150: x86: buffer overrun with shadow paging + tracinghttps://agentprime.io/advisories/CVE-2025-58150/https://agentprime.io/advisories/CVE-2025-58150/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Jan 2026 15:33:17 GMTCVECVE-2025-58149: Incorrect removal of permissions on PCI device unplughttps://agentprime.io/advisories/CVE-2025-58149/https://agentprime.io/advisories/CVE-2025-58149/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Oct 2025 11:50:39 GMTCVECVE-2025-58148: x86: Incorrect input sanitisation in Viridian hypercallshttps://agentprime.io/advisories/CVE-2025-58148/https://agentprime.io/advisories/CVE-2025-58148/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Oct 2025 11:50:28 GMTCVECVE-2025-58147: x86: Incorrect input sanitisation in Viridian hypercallshttps://agentprime.io/advisories/CVE-2025-58147/https://agentprime.io/advisories/CVE-2025-58147/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Oct 2025 11:50:28 GMTCVECVE-2025-58145: Arm issues with page refcountinghttps://agentprime.io/advisories/CVE-2025-58145/https://agentprime.io/advisories/CVE-2025-58145/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Sep 2025 14:05:36 GMTCVECVE-2025-58144: Arm issues with page refcountinghttps://agentprime.io/advisories/CVE-2025-58144/https://agentprime.io/advisories/CVE-2025-58144/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Sep 2025 14:05:36 GMTCVECVE-2025-58143: Mutiple vulnerabilities in the Viridian interfacehttps://agentprime.io/advisories/CVE-2025-58143/https://agentprime.io/advisories/CVE-2025-58143/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Sep 2025 14:05:29 GMTCVEcriticalCVE-2025-58142: Mutiple vulnerabilities in the Viridian interfacehttps://agentprime.io/advisories/CVE-2025-58142/https://agentprime.io/advisories/CVE-2025-58142/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Sep 2025 14:05:29 GMTCVEcriticalCVE-2025-27466: Mutiple vulnerabilities in the Viridian interfacehttps://agentprime.io/advisories/CVE-2025-27466/https://agentprime.io/advisories/CVE-2025-27466/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Sep 2025 14:05:29 GMTCVEcriticalCVE-2025-1713: deadlock potential with VT-d and legacy PCI device pass-throughhttps://agentprime.io/advisories/CVE-2025-1713/https://agentprime.io/advisories/CVE-2025-1713/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Jul 2025 13:59:46 GMTCVE