x86: DMs may cause mem leak by IRQ binding

ISSUE DESCRIPTION When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that...

x86: improper handling of HVM emulation return codes

ISSUE DESCRIPTION A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. IMPACT Passing through a PCI device with at least one BAR in IO address space to unprivileged HVM guests can result in a Denial of Service DoS affecting the entire host...

PT-2026-27499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Xen privcmd driver allows user space processes to issue arbitrary hypercalls. Normally, access is limited to root and the hypervisor denies hypercalls affecting other domains. Howeve...

Incorrect removal of permissions on PCI device unplug

ISSUE DESCRIPTION When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the...

EUVD-2016-7973

Malware in sbrugna...

EUVD-2017-8214

Malware in sbrugna...

EUVD-2012-5404

Malware in sbrugna...

EUVD-2020-7552

Malware in sbrugna...

EUVD-2015-7867

Malware in sbrugna...

EUVD-2020-21422

Malware in sbrugna...

EUVD-2015-0374

Malware in sbrugna...

EUVD-2012-4466

Malware in sbrugna...

EUVD-2015-8492

Malware in sbrugna...

EUVD-2017-8213

Malware in sbrugna...

EUVD-2018-11633

Malware in sbrugna...

EUVD-2016-10191

Malware in sbrugna...

EUVD-2013-0194

Malware in sbrugna...

EUVD-2014-5047

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-19583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service guest OS crash because VMX VMEntry checks mishand...

Linux Distros Unpatched Vulnerability : CVE-2022-49101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xen: delay xenhvminittimeops if kdump is boot on vcpu=32 The schedclock can be used very ear...