13124 matches found
CVE-2026-31787
XSA-487 / CVE-2026-31787 LinuxカーネルのXenprivcmdドライバにおける二重解放 LinuxカーネルのXen privcmdドライバにおけるカーネルメモリの二重解放により、カーネルのロックダウン（セキュアブート）を回避できます。この脆弱性の悪用にはrootレベルのアクセスが必要であり、広範なセキュリティへの影響は限定的です。...
CVE-2026-98156
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
CVE-2026-98156 drm/virtio: use the DMA API for resource backing on Xen
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
CVE-2026-98156
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
CVE-2026-98156
The Linux kernel contains a vulnerability in the drm/virtio component when running on Xen . The root cause is that virtio-gpu independently determines whether to use the DMA API based solely on a feature bit. Because QEMU does not set iommu_platform on virtio-vga by default, the system fails to n...
CVE-2026-98156 drm/virtio: use the DMA API for resource backing on Xen
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
EUVD-2026-86987
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
CVE-2026-98156
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...
Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN 未认证远程代码执行 更多技术细节请参阅我们的博客文章 https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC 实战 root@kitploit: python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoami" / | | |\ \ \ / / \ \ / | | | | / \ /...
cve-2024-8069-exp-Citrix-Virtual-Apps-XEN
CVE-2024-8068 and CVE-2024-8069 Citrix 仮想アプリおよびデスクトップ XEN 未認証のリモートコード実行脆弱性 詳細な技術情報については、当社のブログ記事をご覧ください。 https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 エクスプロイトデモ root@kitploit: python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoami"...
ROS-20260921-73-0123
The vulnerability in Xen is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260921-73-0117
The vulnerability in Xen is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
ROS-20260921-73-0121
The vulnerability in Xen is related to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20260921-73-0044
The vulnerability in Xen is related to incorrect resource blocking. Exploiting this vulnerability can allow a attacker to cause service failures...
ROS-20260921-73-0051
The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260921-73-0096
The vulnerability in Xen is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260921-73-0046
The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE SLES12: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2026:4089-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4089-1 advisory. - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation...
SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:4090-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4090-1 advisory. Update to version 4.20.3 jscPED-8907. Security issues fixed: - CVE-2026-42493: x86 shadow paging is deprecated...