Lucene search
+L

38 matches found

Xen Project
Xen Project
added 2026/09/08 12:00 p.m.8 views

Unconditionally do TLB flushing ahead of page scrubbing

ISSUE DESCRIPTION x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify ...

4.3CVSS5.7AI score0.00231EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:00 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2026-62426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and...

8.8CVSS5.8AI score0.0024EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/28 1:19 p.m.8 views

ALPINE-CVE-2026-62427

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...

8.8CVSS5.4AI score0.0024EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/28 1:19 p.m.7 views

ALPINE-CVE-2026-62426

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...

8.8CVSS5.4AI score0.0022EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/28 12:31 p.m.38 views

CVE-2026-62426 sysctl and platform-op locks open to abuse

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...

0.0022EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/28 12:31 p.m.16 views

EUVD-2026-49778

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...

8.8CVSS5.9AI score0.0024EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/07/28 12:31 p.m.16 views

CVE-2026-62426

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...

8.8CVSS5.8AI score0.0022EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:31 p.m.12 views

CVE-2026-62426

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...

5.8AI score0.0022EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/18 2:17 p.m.21 views

CVE-2026-42490

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

6.5CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/18 2:17 p.m.22 views

CVE-2026-42489

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

5.3CVSS0.00078EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/18 2:17 p.m.13 views

CVE-2026-42490

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

6.5CVSS6.1AI score0.002EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/06/18 2:17 p.m.13 views

CVE-2026-42489

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

5.3CVSS6.1AI score0.00078EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/18 1:47 p.m.43 views

CVE-2026-42490 domctl lock open to abuse

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/18 1:47 p.m.45 views

CVE-2026-42489 domctl lock open to abuse

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

0.00078EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/06/18 1:47 p.m.29 views

CVE-2026-42489

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

5.3CVSS5.3AI score0.00078EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/18 1:47 p.m.28 views

EUVD-2026-37890

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

6.5CVSS5.3AI score0.002EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/18 1:47 p.m.18 views

CVE-2026-42489

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

6.5CVSS5.2AI score0.002EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/18 1:47 p.m.34 views

EUVD-2026-37889

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

6.5CVSS5.3AI score0.002EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2014-1956

Malware in sbrugna...

5.2CVSS6AI score0.0054EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2023/02/15 5:30 a.m.6 views

SUSE CVE-2014-1892

Xen 3.3 through 4.1, when XSM is enabled, allows local users to cause a denial of service via vectors related to a "large memory allocation," a different vulnerability than CVE-2014-1891, CVE-2014-1893, and CVE-2014-1894...

5.2CVSS6.4AI score0.0054EPSS
SaveExploits0References6
Rows per page
Query Builder