PT-2021-30230

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.9 Description The issue concerns the handling of PV traps on secondary processors. It was introduced in version v2.6.23 and fixed in version v5.14.9. The actual impact and attack plausibility have not yet...

PT-2021-29967

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.286 Description The issue is related to PV trap handling on secondary processors. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29985

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue is related to PV trap handling on secondary processors. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v4.9.285, update to...

PT-2021-30012

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue is related to PV trap handling on secondary processors. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-30081

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue is related to PV trap handling on secondary processors. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-30141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.23 through 5.10.69 Description The issue is related to PV trap handling on secondary processors. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.23...

PT-2021-26235

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.9 Description: The issue concerns the handling of PV traps on secondary processors. It was introduced in version v2.6.23 and fixed in version v5.14.9. The actual impact and attack plausibility have not yet...

PT-2021-26146

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue concerns the handling of PV traps on secondary processors. It was introduced in version v2.6.23 and fixed in version v5.10.70. The actual impact and attack plausibility have not yet...

PT-2021-26043

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to PV trap handling on secondary processors. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25972

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.286 Description The issue concerns the handling of PV traps on secondary processors. It was introduced in version v2.6.23 and fixed in version v4.4.286. The actual impact and attack plausibility have not yet...

PT-2021-26017

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue concerns the handling of PV traps on secondary processors. It was introduced in version v2.6.23 and fixed in version v4.14.249. The actual impact and attack plausibility have not y...

PT-2021-25990

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue is related to PV trap handling on secondary processors. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

grant table v2 status pages may remain accessible after de-allocation

ISSUE DESCRIPTION Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest switched back from v2 to v1. The freeing of such...

CVE-2021-28691

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

CVE-2021-28691

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

CVE-2021-28691

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

CVE-2021-28691

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

CVE-2021-28691: Use After Free

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

UVI-2021-1000825 x86/kvm: Disable all PV features on crash

x86/kvm: Disable all PV features on crash This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...

GSD-2021-1000821 x86/kvm: Teardown PV features on boot CPU as well

x86/kvm: Teardown PV features on boot CPU as well This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...