14674 matches found
CVE-2026-99155
A flaw was found in the Linux kernel's Xen virtual Small Computer System Interface SCSI frontend driver. This vulnerability allows a malicious or compromised backend service to trigger a Denial of Service DoS by crashing the guest virtual machine. The issue occurs when the driver processes a...
CVE-2026-31787
XSA-487 / CVE-2026-31787 Linux kernel double free in Xen privcmd driver A double free of kernel memory in the Linux kernel's Xen privcmd driver allows circumvention of kernel lockdown secure boot. Exploitation requires root-level access, which limits the broader security implications. | ---|---...
Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code execution See our blog post for technical details https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC in Action python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoam...
CLEANSTART-2024-DP84679 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
Security vulnerability affects the xen package. Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...
cve-2024-8069-exp-Citrix-Virtual-Apps-XEN
CVE-2024-8068 and CVE-2024-8069 Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code Execution Vulnerability Check out our blog post for detailed technical information. https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 Exploit Demonstration python...
Security update for xen
This update for xen fixes the following issues: CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround bsc1283317. CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. CVE-2026-79610: grant-table: double version change race bsc1283322. CVE-2026-79611: VMX: VMentry failure with...
CVE-2026-99155
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
SUSE CVE-2026-99155
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
DEBIAN-CVE-2026-99155
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
AZL-111293 CVE-2026-99155 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
CVE-2026-99155 scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
CVE-2026-99155 scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
EUVD-2026-111907
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
CVE-2026-99155
The Linux kernel contains a vulnerability in the scsi: xen/scsifront component where the scsifront_do_response() function fails to verify if a shadow slot is populated before dereferencing it. While the function validates that the rqid is within the valid range (VSCSIIF_MAX_REQS), it does not che...
Linux Distros Unpatched Vulnerability : CVE-2026-99155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS...
UBUNTU-CVE-2026-99155
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
CVE-2026-99155: Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry…
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
CVE-2026-99155
In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL shadow entry on a backend response scsifrontdoresponse validates the rqid in a backend response against VSCSIIFMAXREQS before using it to index info-shadow, but then dereferences the entry to...
CVE-2026-99057
A flaw was found in the Linux kernel's Xen network frontend driver. When processing a network response chain that exceeds the allocated buffer capacity, an error handling failure prevents the socket buffer and associated memory pages from being freed. A malicious or compromised backend can exploi...
xen-4.22.0_06-1.1 on GA media (moderate)
xen-4.22.006-1.1 on GA media Announcement ID: openSUSE-SU-2026:12138-1 Rating: moderate Cross-References: CVE-2026-79607 CVE-2026-79608 CVE-2026-79609 CVE-2026-79610 CVE-2026-79611 CVSS scores: CVE-2026-79607 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-79607 SUSE : 8.7...