PoD: Don't try to reclaim special pages

ISSUE DESCRIPTION A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen. IMPACT A buggy or malicious guest can cause corruption of Xen's state, leading to crashes or other...

Viridian STIMER division by zero

ISSUE DESCRIPTION The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a DE fault. IMPACT Enabling Viridian STIMERs to unprivileged HVM guests can result in a Denial of Service DoS affecting the entire...

EUVD-2013-4239

Malware in sbrugna...

EUVD-2020-21928

Malware in sbrugna...

EUVD-2021-26642

Malware in sbrugna...

EUVD-2007-6382

Malware in sbrugna...

EUVD-2020-18283

Malware in sbrugna...

EUVD-2014-8697

Malware in sbrugna...

EUVD-2015-4131

Malware in sbrugna...

EUVD-2013-4257

Malware in sbrugna...

EUVD-2020-21851

Malware in sbrugna...

EUVD-2020-7550

Malware in sbrugna...

EUVD-2019-9194

Malware in sbrugna...

EUVD-2013-2166

Malware in sbrugna...

EUVD-2013-0195

Malware in sbrugna...

EUVD-2022-28146

Malicious code in bioql PyPI...

CLSA-2025-1751551161 Update of grub2

Improve Xen detection so we don't set GRUBENABLEBLSCFG=false for HVM domU guests - Debrand for Cloudlinux...

CVE-2024-45818: Improper Locking

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the virtual VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulatin...

PT-2024-10468

Name of the Vulnerable Software and Affected Versions Xen hypervisor versions prior to 4.7 Description The issue is related to the hypervisor's code for accelerating VGA memory accesses for HVM guests in "standard" mode. The locking mechanism involved has an unusual discipline, which can lead to ...

CVE-2023-46842

Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a...