Astra Linux – Vulnerability in Linux, Linux 5.10

Rogue backends can cause Denial of Service DoS attacks on guests through high-frequency events. This CNA information record relates to multiple Common Vulnerabilities and Exposures CVEs; the text explains which aspects/vulnerabilities correspond to which CVEs. Xen allows for the execution of PV...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: avoid SBSA UART accessing the DMACR register The chapter “B Generic UART” in “ARM Server Base System Architecture” 1 describes a generic UART interface. Such a generic UART does not support DMA. In current cod...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/xen: Fixed a memory leak in xeninitlockcpu. In xeninitlockcpu, the @name function allocates a new string using kasprintf. If bindipitoirqhandler fails, that allocated string should be freed; otherwise, it may lead to a memory...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xen/netback: Avoid entering xenvifrxnextskb with an empty rx queue. xenvifrxnextskb expects the rx queue not to be empty. However, if the loop in xenvifrxaction performs multiple iterations, the availability of another skb in the...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A use-after-free flaw was discovered in xen9pfsfrontremovet in net/9p/transxen.c within the Xen transport for 9pfs in the Linux kernel. This flaw could allow a local attacker to cause the system to crash due to a race condition, potentially leading to a kernel information leak...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Rejects configurations with a zero queue count from guests. A malicious or faulty Xen guest can set the value of the xenbus key “multi-queue-num-queues” to “0”. The connect function in the backend only validates the...

Astra Linux – Vulnerability in Xen

x86: TSX Async Abort protections are not restored after S3. This issue relates to the TSX Async Abort speculative security vulnerability. For more details, please refer to https://xenbits.xen.org/xsa/advisory-305.html. To mitigate TAA by disabling TSX the default and preferred option, it is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Handle NULL returned by xdpconvertbufftoframe. The function xdpconvertbufftoframe may return NULL if it fails to correctly convert the XDP buffer into an XDP frame due to memory constraints, internal errors, or...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel through version 5.11.3, when it was used with Xen PV. A certain part of the netback driver lacks proper handling of errors, such as failed memory allocations as a result of changes to the way errors related to grant mapping are handled. A denial-of-servi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fixed a potential memory leak in scsibackremove. The memory allocated for the struct vscsiblkinfo structure in scsibackprobe is not freed in scsibackRemove, resulting in potential memory leaks during the...

Astra Linux – Vulnerability in Xen

Observable discrepancies in response times of some Intel processors may allow authorized users to potentially disclose information through local access...

Xen: Improper Handling of HVM Emulation Return Codes (XSA-510)

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Xen: Stale TLB Entry Ahead of Page Scrubbing (XSA-511)

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

Xen: x86 DMs May Cause Mem Leak by IRQ Binding (XSA-509)

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen hypervisors allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

OPENSUSE-SU-2026:11738-1 xen-4.22.0_04-1.1 on GA media

These are all security issues fixed in the xen-4.22.004-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to numerical overflow. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-62437

A flaw was found in Xen. When a guest virtual machine is terminated, its device model DM can re-establish interrupt request IRQ tracking structures after the initial cleanup. This prevents some of these structures from being properly deallocated, leading to a memory leak. A local attacker with...

CVE-2026-79602

A flaw was found in Xen. A malicious guest operating system, when configured with a PCI device that has a Base Address Register BAR mapped to the I/O port space, can trigger an internal error within the Xen hypervisor. This vulnerability could lead to a denial of service, causing the host system ...

CVE-2026-79603

A flaw was found in Xen. x86 paravirtualized PV guests can free memory pages while a stale Translation Lookaside Buffer TLB entry still points to them. This creates a window where a PV guest can modify a page after it has been scrubbed cleared but before the TLB is flushed. This could lead to dat...