1390 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001816)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001816 advisory. The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002090)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002090 advisory. The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service host OS panic or hang by...
CVE-2021-28707
PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...
CVE-2021-28703
grant table v2 status pages may remain accessible after de-allocation take two Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated whe...
USN-7934-1 linux-azure, linux-azure-6.14 vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux...
The vulnerability of the send_ipi() function in cross-platform Xen hypervisors of Linux operating systems allows attackers to access confidential information.
The vulnerability of the sendipi function in the cross-platform hypervisor of the Linux operating system is related to reading data beyond the allowed range. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...
USN-7879-4 linux-gcp-6.14, linux-raspi vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Several security issues were discovered in the Linux kernel. An attacker could possibly use...
[SECURITY] [DSA 6068-1] xen security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6068-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 02, 2025 https://www.debian.org/security/faq -...
xen: fix UAF in dmabuf_exp_from_pages()
...
ROS-20251124-08
A vulnerability in the cross-platform Xen hypervisor of the Linux operating system kernel is related to a bug in the bounds checking in the vpmaskset function when processing a sparse HVVPSET format. Exploitation of the of the vulnerability could allow an attacker acting remotely to escalate...
kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
MGASA-2025-0270 Updated xen packages fix security vulnerabilities
Double unlock in x86 guest IRQ handling. CVE-2024-31143 Xapi: Metadata injection attack against backup/restore functionality. CVE-2024-31144 Error handling in x86 IOMMU identity mapping. CVE-2024-31145 PCI device pass-through with shared resources. CVE-2024-31146 x86: Deadlock in vlapicerror...
[SECURITY] Fedora 42 Update: xen-4.19.3-8.fc42
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 41 Update: xen-4.19.3-7.fc41
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
EUVD-2025-37345
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause...
CVE-2025-58148
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause...
ALPINE-CVE-2025-58147
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause...
[SECURITY] Fedora 43 Update: xen-4.20.1-8.fc43
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems, related to deficiencies in access control, allows attackers to gain access to confidential information.
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to confidential information remotely...