CVE-2026-98375

A flaw was found in the Linux kernel's Xen network frontend driver. This vulnerability allows a malicious host backend to cause a Denial of Service DoS by transmitting incoming network packets with an incomplete Ethernet header. Because the driver fails to verify that incoming packet buffers meet...

CVE-2026-31787

XSA-487 / CVE-2026-31787 Double free du noyau Linux dans le pilote Xenprivcmd Un double free de la mémoire du noyau dans le pilote privcmd de Xen du noyau Linux permet de contourner le verrouillage du noyau secure boot. L'exploitation nécessite un accès de niveau root, ce qui limite les...

Linux xen-netfront: backend can crash guest via malformed RX packets

ISSUE DESCRIPTION If a RX packet sent from the networking backend to the Linux xen-netfront driver is split into multiple slots and the first slot is shorter than an Ethernet header, a BUG will crash the guest. This is a backend induced Denial of Service DoS. IMPACT A malicious network backend ca...

DEBIAN-CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

EUVD-2026-95525

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-98375

The Linux kernel contains a vulnerability in the xen/netfront component where handle_incoming_queue() fails to verify if the pull_to length is at least ETH_HLEN . This allows a backend to provide a short RX slot, causing eth_type_trans() to either trigger a BUG() in __skb_pull() (if subsequent sl...

CVE-2026-98375 xen/netfront: drop RX packets with a short Ethernet header

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-98375 xen/netfront: drop RX packets with a short Ethernet header

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

PT-2026-108761

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handle incoming queue pulls pull to bytes into the head before calling eth type trans. pull to is the length of the first RX slot, capped at RX COPY THRESHOLD, and that...

Citrix-Virtual-Apps-XEN-Exploit

CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code execution See our blog post for technical details https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC in Action python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoam...

The vulnerability of the Grant Table, which is used by Xen hypervisors, allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Grant Table of the Xen hypervisor is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

The vulnerability of the Populate on Demand (PoD) mechanism in Xen hypervisors allows a hacker to trigger a service failure.

The vulnerability of the Populate on Demand PoD mechanism in Xen hypervisors lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the DMOP call processing code in Xen hypervisors allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. [source-iocs-preserved const=DM_OP]

The vulnerability of the DMOP call processing code in Xen hypervisors is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Grant Table, which is used by Xen hypervisors, allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Grant Table of the Xen hypervisor is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

The vulnerability of the FIFO event processing mechanism in Xen hypervisors allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the FIFO event processing mechanism in Xen hypervisors is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

cve-2024-8069-exp-Citrix-Virtual-Apps-XEN

CVE-2024-8068 and CVE-2024-8069 Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code Execution Vulnerability Check out our blog post for detailed technical information. https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 Exploit Demonstration python...

[SECURITY] Fedora 45 Update: xen-4.21.1-11.fc45

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Added the missing skbmarkforrecycle function. It should be noted that the skbmarkforrecycle function was introduced later than the “fixes” tag in commit 6a5bcd84e886 “pagepool: Allow drivers to hint on SKB recycling...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel, specifically with versions up to 5.9.1, when used with Xen in versions up to 4.14.x. Users of guest operating systems may experience a denial of service where the host operating system hangs due to a high rate of events affecting dom0, also known as...