[SECURITY] [DSA 4888-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4888-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 10, 2021 https://www.debian.org/security/faq -...

Fedora 33 : xen (2021-47f53a940a)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-47f53a940a advisory. - An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This mea...

Fedora: Security Advisory for xen (FEDORA-2021-4c819bf1ad)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-26933

An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes such as the ones during scrubbing have reached the memory before handing over the page to a guest...

CVE-2021-26933

CVE-2021-26933 affects the Xen hypervisor (Xen 4.9–4.14.x) on ARM: a guest can influence cache-bypass behavior, and cache-cleaning may occur before scrub verification, so there is no guarantee that all writes have reached memory before handing the page to the guest. The practical consequence is p...