Search for packages
| purl | pkg:deb/debian/xen@4.11.4%2B107-gef32c7afa2-1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1wgc-r96w-7kg9
Aliases: CVE-2021-3308 XSA-360 |
IRQ vector leak on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-1wtd-67ef-1qej
Aliases: CVE-2021-28695 |
IOMMU page mapping issues on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-1x3w-n7ms-eqeh
Aliases: CVE-2020-29485 XSA-330 |
oxenstored memory leak in reset_watches |
Affected by 45 other vulnerabilities. |
|
VCID-28t2-hng7-tfe5
Aliases: CVE-2021-27379 |
missed flush in XSA-321 backport |
Affected by 45 other vulnerabilities. |
|
VCID-2n9p-6t7s-kqc5
Aliases: CVE-2021-26933 XSA-364 |
arm: The cache may not be cleaned for newly allocated scrubbed pages |
Affected by 45 other vulnerabilities. |
|
VCID-2uap-2vm1-efcr
Aliases: CVE-2022-29900 |
Retbleed - arbitrary speculative code execution with return instructions |
Affected by 45 other vulnerabilities. |
|
VCID-32w3-vmcb-wfd9
Aliases: CVE-2021-28693 XSA-372 |
xen/arm: Boot modules are not scrubbed |
Affected by 45 other vulnerabilities. |
|
VCID-34gr-dtsz-1fab
Aliases: CVE-2020-27672 XSA-345 |
x86: Race condition in Xen mapping code |
Affected by 45 other vulnerabilities. |
|
VCID-34ng-ftbx-e3cm
Aliases: CVE-2022-42317 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-39t8-p1q7-eyag
Aliases: CVE-2022-42318 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-3d53-4qtr-myhm
Aliases: CVE-2022-42332 XSA-427 |
x86 shadow plus log-dirty mode use-after-free |
Affected by 45 other vulnerabilities. |
|
VCID-3pxf-xndw-5fft
Aliases: CVE-2020-29484 XSA-324 |
Xenstore: guests can crash xenstored via watchs |
Affected by 45 other vulnerabilities. |
|
VCID-3whm-8fyv-zyhd
Aliases: CVE-2020-25604 XSA-336 |
race when migrating timers between x86 HVM vCPU-s |
Affected by 45 other vulnerabilities. |
|
VCID-416b-93m6-jyby
Aliases: CVE-2022-42313 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-42ma-8ash-j7c8
Aliases: CVE-2022-42311 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-4429-qf2w-jqg3
Aliases: CVE-2022-21166 XSA-404 |
x86: MMIO Stale Data vulnerabilities |
Affected by 45 other vulnerabilities. |
|
VCID-4spa-usqt-93b2
Aliases: CVE-2022-26362 XSA-401 |
x86 pv: Race condition in typeref acquisition |
Affected by 45 other vulnerabilities. |
|
VCID-5cw7-rv5f-jfaq
Aliases: CVE-2022-33745 XSA-408 |
insufficient TLB flush for x86 PV guests in shadow mode |
Affected by 45 other vulnerabilities. |
|
VCID-5dbd-kz24-6fc1
Aliases: CVE-2021-28709 XSA-389 |
issues with partially successful P2M updates on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-6kh6-edk7-xkcc
Aliases: CVE-2020-27670 XSA-347 |
unsafe AMD IOMMU page table updates |
Affected by 45 other vulnerabilities. |
|
VCID-6xbp-t4qh-tbhv
Aliases: CVE-2022-42312 XSA-326 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-77st-3475-5kdr
Aliases: CVE-2021-28687 XSA-368 |
HVM soft-reset crashes toolstack |
Affected by 45 other vulnerabilities. |
|
VCID-7d5b-66n7-zbe1
Aliases: CVE-2022-42333 CVE-2022-43334 XSA-428 |
x86/HVM pinned cache attributes mis-handling |
Affected by 45 other vulnerabilities. |
|
VCID-7ek3-weqx-9fhs
Aliases: CVE-2022-23824 XSA-422 |
x86: Multiple speculative security issues |
Affected by 45 other vulnerabilities. |
|
VCID-7etc-u5ya-zued
Aliases: CVE-2022-26358 |
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues |
Affected by 45 other vulnerabilities. |
|
VCID-7t5h-jy8h-t3d4
Aliases: CVE-2022-42323 |
Xenstore: Cooperating guests can create arbitrary numbers of nodes |
Affected by 45 other vulnerabilities. |
|
VCID-7wyt-uh2c-a3ha
Aliases: CVE-2022-26363 |
x86 pv: Insufficient care with non-coherent mappings |
Affected by 45 other vulnerabilities. |
|
VCID-7ysh-usku-c3dz
Aliases: CVE-2022-42334 |
x86/HVM pinned cache attributes mis-handling |
Affected by 45 other vulnerabilities. |
|
VCID-7zpj-3par-s3b5
Aliases: CVE-2022-42316 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-87tq-2me2-d3bb
Aliases: CVE-2022-42314 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-8cb8-vq2c-q3e9
Aliases: CVE-2022-42309 XSA-414 |
Xenstore: Guests can crash xenstored |
Affected by 45 other vulnerabilities. |
|
VCID-8r8y-8bq2-jufj
Aliases: CVE-2020-29479 XSA-353 |
oxenstored: permissions not checked on root node |
Affected by 45 other vulnerabilities. |
|
VCID-91hk-73kq-83g6
Aliases: CVE-2022-33748 XSA-411 |
lock order inversion in transitive grant copy handling |
Affected by 45 other vulnerabilities. |
|
VCID-9hr5-p18q-7qb8
Aliases: CVE-2020-29571 XSA-359 |
FIFO event channels control structure ordering |
Affected by 45 other vulnerabilities. |
|
VCID-9s43-gewn-bycc
Aliases: CVE-2021-28703 XSA-387 |
grant table v2 status pages may remain accessible after de-allocation (take two) |
Affected by 45 other vulnerabilities. |
|
VCID-9zqd-3x84-43gc
Aliases: CVE-2022-23033 XSA-393 |
arm: guest_physmap_remove_page not removing the p2m mappings |
Affected by 45 other vulnerabilities. |
|
VCID-az8d-xrb4-3ug4
Aliases: CVE-2021-28701 XSA-384 |
Another race in XENMAPSPACE_grant_table handling |
Affected by 45 other vulnerabilities. |
|
VCID-b7tb-ns1t-fyaw
Aliases: CVE-2022-26361 |
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues |
Affected by 45 other vulnerabilities. |
|
VCID-bc6f-wu8g-5yb4
Aliases: CVE-2020-29483 XSA-325 |
Xenstore: guests can disturb domain cleanup |
Affected by 45 other vulnerabilities. |
|
VCID-bs56-1z79-uqbt
Aliases: CVE-2020-25596 XSA-339 |
x86 pv guest kernel DoS via SYSENTER |
Affected by 45 other vulnerabilities. |
|
VCID-bxae-85uh-uyek
Aliases: CVE-2021-28708 |
PoD operations on misaligned GFNs |
Affected by 45 other vulnerabilities. |
|
VCID-bxb7-7gpw-qybb
Aliases: CVE-2022-42315 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-bzve-5gwu-8ydb
Aliases: CVE-2020-25602 XSA-333 |
x86 pv: Crash when handling guest access to MSR_MISC_ENABLE |
Affected by 45 other vulnerabilities. |
|
VCID-csy7-esn4-u3gq
Aliases: CVE-2022-21123 |
x86: MMIO Stale Data vulnerabilities |
Affected by 45 other vulnerabilities. |
|
VCID-d3ad-6tme-bfem
Aliases: CVE-2020-29486 XSA-352 |
oxenstored: node ownership can be changed by unprivileged clients |
Affected by 45 other vulnerabilities. |
|
VCID-dfjm-gwzm-jqbt
Aliases: CVE-2022-42324 XSA-420 |
Oxenstored 32->31 bit integer truncation issues |
Affected by 45 other vulnerabilities. |
|
VCID-dgm4-ye4m-1fcq
Aliases: CVE-2022-42320 XSA-417 |
Xenstore: Guests can get access to Xenstore nodes of deleted domains |
Affected by 45 other vulnerabilities. |
|
VCID-dj1v-h79p-9ydz
Aliases: CVE-2022-26356 XSA-397 |
Racy interactions between dirty vram tracking and paging log dirty hypercalls |
Affected by 45 other vulnerabilities. |
|
VCID-dqy9-zkvw-e3gk
Aliases: CVE-2020-25601 XSA-344 |
lack of preemption in evtchn_reset() / evtchn_destroy() |
Affected by 45 other vulnerabilities. |
|
VCID-drhd-ytb7-u3em
Aliases: CVE-2020-29481 XSA-322 |
Xenstore: new domains inheriting existing node permissions |
Affected by 45 other vulnerabilities. |
|
VCID-e96u-uwba-kfg5
Aliases: CVE-2021-26313 |
Speculative Code Store Bypass |
Affected by 45 other vulnerabilities. |
|
VCID-eb8v-p31a-yuhu
Aliases: CVE-2020-25597 XSA-338 |
once valid event channels may not turn invalid |
Affected by 45 other vulnerabilities. |
|
VCID-eka3-u8e5-3uad
Aliases: CVE-2020-27671 XSA-346 |
undue deferral of IOMMU TLB flushes |
Affected by 45 other vulnerabilities. |
|
VCID-ep7n-um5m-ekgk
Aliases: CVE-2020-25595 XSA-337 |
PCI passthrough code reading back hardware registers |
Affected by 45 other vulnerabilities. |
|
VCID-fekb-fbhz-y7g7
Aliases: CVE-2021-28704 XSA-388 |
PoD operations on misaligned GFNs |
Affected by 45 other vulnerabilities. |
|
VCID-fhbs-3nvf-tbha
Aliases: CVE-2022-33747 XSA-409 |
Arm: unbounded memory consumption for 2nd-level page tables |
Affected by 45 other vulnerabilities. |
|
VCID-fqt9-2esb-ffan
Aliases: CVE-2021-28702 XSA-386 |
PCI devices with RMRRs not deassigned correctly |
Affected by 45 other vulnerabilities. |
|
VCID-g72t-7kx1-abcs
Aliases: CVE-2021-28700 XSA-383 |
xen/arm: No memory limit for dom0less domUs |
Affected by 45 other vulnerabilities. |
|
VCID-gdsj-4cbx-ufep
Aliases: CVE-2021-28705 |
issues with partially successful P2M updates on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-gj1u-mbaj-kyc5
Aliases: CVE-2022-42310 XSA-415 |
Xenstore: Guests can create orphaned Xenstore nodes |
Affected by 45 other vulnerabilities. |
|
VCID-h9c6-yw5r-v3ex
Aliases: CVE-2020-29567 XSA-356 |
infinite loop when cleaning up IRQ vectors |
Affected by 45 other vulnerabilities. |
|
VCID-hg4z-ad3f-fbc2
Aliases: CVE-2022-26364 XSA-402 |
x86 pv: Insufficient care with non-coherent mappings |
Affected by 45 other vulnerabilities. |
|
VCID-hsau-swt9-kyf7
Aliases: CVE-2022-42319 XSA-416 |
Xenstore: Guests can cause Xenstore to not free temporary memory |
Affected by 45 other vulnerabilities. |
|
VCID-hx7j-eymk-4ygk
Aliases: CVE-2022-26359 |
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues |
Affected by 45 other vulnerabilities. |
|
VCID-hyup-47wa-pfac
Aliases: CVE-2021-28690 XSA-377 |
x86: TSX Async Abort protections not restored after S3 |
Affected by 45 other vulnerabilities. |
|
VCID-jwdv-qe4x-yfgw
Aliases: CVE-2022-26357 XSA-399 |
race in VT-d domain ID cleanup |
Affected by 45 other vulnerabilities. |
|
VCID-k5j4-3xmv-a7bk
Aliases: CVE-2020-29566 XSA-348 |
undue recursion in x86 HVM context switch code |
Affected by 45 other vulnerabilities. |
|
VCID-kcj6-ua4t-ybgj
Aliases: CVE-2021-28696 |
IOMMU page mapping issues on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-knqd-zktw-cydm
Aliases: CVE-2021-0089 XSA-375 |
Speculative Code Store Bypass |
Affected by 45 other vulnerabilities. |
|
VCID-mcs2-ndqd-tydv
Aliases: CVE-2022-42331 XSA-429 |
x86: speculative vulnerability in 32bit SYSCALL path |
Affected by 45 other vulnerabilities. |
|
VCID-mf8g-nbkw-f7gr
Aliases: CVE-2021-28697 XSA-379 |
grant table v2 status pages may remain accessible after de-allocation |
Affected by 45 other vulnerabilities. |
|
VCID-n3t2-m6br-ufb3
Aliases: CVE-2020-29040 XSA-355 |
stack corruption from XSA-346 change |
Affected by 45 other vulnerabilities. |
|
VCID-n7pg-b7kc-wkew
Aliases: CVE-2021-28692 XSA-373 |
inappropriate x86 IOMMU timeout detection / handling |
Affected by 45 other vulnerabilities. |
|
VCID-ndz3-372h-8fhk
Aliases: CVE-2020-29570 XSA-358 |
FIFO event channels control block related ordering |
Affected by 45 other vulnerabilities. |
|
VCID-p3uc-18e9-skb4
Aliases: CVE-2020-29480 XSA-115 |
xenstore watch notifications lacking permission checks |
Affected by 45 other vulnerabilities. |
|
VCID-p7ug-wwk5-63gb
Aliases: CVE-2020-25600 XSA-342 |
out of bounds event channels available to 32-bit x86 domains |
Affected by 45 other vulnerabilities. |
|
VCID-pb8n-hmsc-syfw
Aliases: CVE-2022-33746 XSA-410 |
P2M pool freeing may take excessively long |
Affected by 45 other vulnerabilities. |
|
VCID-pphm-ygb7-q7g2
Aliases: CVE-2022-42322 XSA-419 |
Xenstore: Cooperating guests can create arbitrary numbers of nodes |
Affected by 45 other vulnerabilities. |
|
VCID-pzt3-abab-4kdd
Aliases: CVE-2020-27674 XSA-286 |
x86 PV guest INVLPG-like flushes may leave stale TLB entries |
Affected by 45 other vulnerabilities. |
|
VCID-qnew-xqte-kbej
Aliases: CVE-2022-42321 XSA-418 |
Xenstore: Guests can crash xenstored via exhausting the stack |
Affected by 45 other vulnerabilities. |
|
VCID-qprv-989b-k3d3
Aliases: CVE-2021-28694 XSA-378 |
IOMMU page mapping issues on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-s4nf-p69f-pue8
Aliases: CVE-2021-28699 XSA-382 |
inadequate grant-v2 status frames array bounds check |
Affected by 45 other vulnerabilities. |
|
VCID-td6e-x2qb-syg3
Aliases: CVE-2022-21125 |
x86: MMIO Stale Data vulnerabilities |
Affected by 45 other vulnerabilities. |
|
VCID-uunr-69dt-q7fn
Aliases: CVE-2021-28698 XSA-380 |
long running loops in grant table handling |
Affected by 45 other vulnerabilities. |
|
VCID-uvcp-ad38-2kcs
Aliases: CVE-2020-29482 XSA-323 |
Xenstore: wrong path length check |
Affected by 45 other vulnerabilities. |
|
VCID-vb2u-yc2z-ayh5
Aliases: CVE-2020-25603 XSA-340 |
Missing memory barriers when accessing/allocating an event channel |
Affected by 45 other vulnerabilities. |
|
VCID-vs9k-akwv-h3ak
Aliases: CVE-2022-23034 XSA-394 |
A PV guest could DoS Xen while unmapping a grant |
Affected by 45 other vulnerabilities. |
|
VCID-w2ch-guy5-6ye9
Aliases: CVE-2022-23035 XSA-395 |
Insufficient cleanup of passed-through device IRQs |
Affected by 45 other vulnerabilities. |
|
VCID-wh75-sc4f-qqc1
Aliases: CVE-2022-42325 XSA-421 |
Xenstore: Guests can create arbitrary number of nodes via transactions |
Affected by 45 other vulnerabilities. |
|
VCID-xcvw-eex8-j3bf
Aliases: CVE-2021-28707 |
PoD operations on misaligned GFNs |
Affected by 45 other vulnerabilities. |
|
VCID-xe4j-gg7f-wyfa
Aliases: CVE-2020-25599 XSA-343 |
races with evtchn_reset() |
Affected by 45 other vulnerabilities. |
|
VCID-z3g4-1vhq-97dj
Aliases: CVE-2022-42326 |
Xenstore: Guests can create arbitrary number of nodes via transactions |
Affected by 45 other vulnerabilities. |
|
VCID-z3qj-cnxq-pkgq
Aliases: CVE-2021-28706 XSA-385 |
guests may exceed their designated memory limit |
Affected by 45 other vulnerabilities. |
|
VCID-z8zf-cqkb-guge
Aliases: CVE-2022-26360 XSA-400 |
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues |
Affected by 45 other vulnerabilities. |
|
VCID-zkyv-h5at-xkgq
Aliases: CVE-2022-23825 XSA-407 |
Retbleed - arbitrary speculative code execution with return instructions |
Affected by 45 other vulnerabilities. |
|
VCID-zrxf-3w1d-t3ba
Aliases: CVE-2020-28368 XSA-351 |
Information leak via power sidechannel |
Affected by 45 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1phh-s2rg-4ugh | resource accounting issues in x86 IOREQ server handling |
CVE-2018-19963
XSA-276 |
| VCID-1x3w-n7ms-eqeh | oxenstored memory leak in reset_watches |
CVE-2020-29485
XSA-330 |
| VCID-28t2-hng7-tfe5 | missed flush in XSA-321 backport |
CVE-2021-27379
|
| VCID-2ke1-fmf7-7ydt | passed through PCI devices may corrupt host memory after deassignment |
CVE-2019-18424
XSA-302 |
| VCID-2n9p-6t7s-kqc5 | arm: The cache may not be cleaned for newly allocated scrubbed pages |
CVE-2021-26933
XSA-364 |
| VCID-2yke-a3ka-ubaq | Device quarantine for alternate pci assignment methods |
CVE-2019-19579
XSA-306 |
| VCID-3488-1xdv-4kc8 | Further issues with restartable PV type change operations |
CVE-2019-19580
XSA-310 |
| VCID-34gr-dtsz-1fab | x86: Race condition in Xen mapping code |
CVE-2020-27672
XSA-345 |
| VCID-3pxf-xndw-5fft | Xenstore: guests can crash xenstored via watchs |
CVE-2020-29484
XSA-324 |
| VCID-3pzv-55sc-37ge | Bugs in dynamic height handling for AMD IOMMU pagetables |
CVE-2019-19577
XSA-311 |
| VCID-3qjm-4egs-1kax | Issues with restartable PV type change operations |
CVE-2019-18421
XSA-299 |
| VCID-3tjz-1jvw-8uc4 | insufficient cache write-back under VT-d |
CVE-2020-15565
XSA-321 |
| VCID-3whm-8fyv-zyhd | race when migrating timers between x86 HVM vCPU-s |
CVE-2020-25604
XSA-336 |
| VCID-493n-hphq-akhy | non-atomic modification of live EPT PTE |
CVE-2020-15567
XSA-328 |
| VCID-61zz-uk19-r7b2 | x86: Inconsistent PV IOMMU discipline |
CVE-2019-17343
|
| VCID-64mf-wa98-rkha | x86: incorrect error handling for guest p2m page removals |
CVE-2018-19964
XSA-277 |
| VCID-6b1e-39na-b7gf | guest use of HLE constructs may lock up host |
CVE-2018-19967
XSA-282 |
| VCID-6jsn-7538-a7ha | L1 Terminal Fault speculative side channel |
CVE-2018-3646
XSA-273 |
| VCID-6kh6-edk7-xkcc | unsafe AMD IOMMU page table updates |
CVE-2020-27670
XSA-347 |
| VCID-6vxj-m9ud-5ke9 | Unlimited Arm Atomics Operations |
CVE-2019-17350
|
| VCID-7ghz-5whc-u3ee | find_next_bit() issues |
CVE-2019-19582
XSA-307 |
| VCID-7vn6-5h93-27hn | L1 Terminal Fault speculative side channel |
CVE-2018-3620
|
| VCID-85jp-mmaq-n7ck | x86: insufficient TLB flushing when using PCID |
CVE-2019-17346
|
| VCID-898q-dzb7-3qe7 | missing preemption in x86 PV page table unvalidation |
CVE-2019-17344
|
| VCID-8r8y-8bq2-jufj | oxenstored: permissions not checked on root node |
CVE-2020-29479
XSA-353 |
| VCID-9ed4-5mca-kfdv | x86: steal_page violates page_struct access discipline |
CVE-2019-17342
|
| VCID-9hr5-p18q-7qb8 | FIFO event channels control structure ordering |
CVE-2020-29571
XSA-359 |
| VCID-9yut-bdsw-gkfy | Microarchitectural Data Sampling speculative side channel |
CVE-2018-12127
|
| VCID-a3by-shse-q3fr | multiple xenoprof issues |
CVE-2020-11740
|
| VCID-an7r-pjrv-pyde | Fix for XSA-240 conflicts with shadow paging |
CVE-2018-19966
XSA-280 |
| VCID-aw3c-9db1-a7eh | ARM: Interrupts are unconditionally unmasked in exception handlers |
CVE-2019-18422
XSA-303 |
| VCID-bc6f-wu8g-5yb4 | Xenstore: guests can disturb domain cleanup |
CVE-2020-29483
XSA-325 |
| VCID-bd46-xyhc-8uf5 | missing descriptor table limit checking in x86 PV emulation |
CVE-2019-18425
XSA-298 |
| VCID-bs56-1z79-uqbt | x86 pv guest kernel DoS via SYSENTER |
CVE-2020-25596
XSA-339 |
| VCID-bzve-5gwu-8ydb | x86 pv: Crash when handling guest access to MSR_MISC_ENABLE |
CVE-2020-25602
XSA-333 |
| VCID-cbtr-g13y-tbhz | Unlimited Arm Atomics Operations |
CVE-2019-17349
|
| VCID-cuab-yybg-6uhs | Use of v2 grant tables may cause crash on ARM |
CVE-2018-15469
XSA-268 |
| VCID-d3ad-6tme-bfem | oxenstored: node ownership can be changed by unprivileged clients |
CVE-2020-29486
XSA-352 |
| VCID-dqy9-zkvw-e3gk | lack of preemption in evtchn_reset() / evtchn_destroy() |
CVE-2020-25601
XSA-344 |
| VCID-drhd-ytb7-u3em | Xenstore: new domains inheriting existing node permissions |
CVE-2020-29481
XSA-322 |
| VCID-e96u-uwba-kfg5 | Speculative Code Store Bypass |
CVE-2021-26313
|
| VCID-eb8v-p31a-yuhu | once valid event channels may not turn invalid |
CVE-2020-25597
XSA-338 |
| VCID-eka3-u8e5-3uad | undue deferral of IOMMU TLB flushes |
CVE-2020-27671
XSA-346 |
| VCID-ep7n-um5m-ekgk | PCI passthrough code reading back hardware registers |
CVE-2020-25595
XSA-337 |
| VCID-favj-4du1-qqe8 | VCPUOP_initialise DoS |
CVE-2019-18420
|
| VCID-g9hd-27my-6baj | x86/PV: page type reference counting issue with failed IOMMU update |
CVE-2019-17345
|
| VCID-gsas-zqvf-2khf | Incorrect error handling in event channel port allocation |
CVE-2020-15566
XSA-317 |
| VCID-hyup-47wa-pfac | x86: TSX Async Abort protections not restored after S3 |
CVE-2021-28690
XSA-377 |
| VCID-k45n-139y-pyeq | Microarchitectural Data Sampling speculative side channel |
CVE-2019-11091
|
| VCID-k5j4-3xmv-a7bk | undue recursion in x86 HVM context switch code |
CVE-2020-29566
XSA-348 |
| VCID-kf1y-ck1r-1kh8 | Bad error path in GNTTABOP_map_grant |
CVE-2020-11743
XSA-316 |
| VCID-km9e-c58c-jkbp | grant table transfer issues on large hosts |
CVE-2019-17340
|
| VCID-knqd-zktw-cydm | Speculative Code Store Bypass |
CVE-2021-0089
XSA-375 |
| VCID-mcd1-vc14-y3g5 | Linear pagetable use / entry miscounts |
CVE-2019-19578
XSA-309 |
| VCID-mjsu-m9mt-ukdx | Missing memory barriers in read-write unlock paths |
CVE-2020-11739
XSA-314 |
| VCID-n7pg-b7kc-wkew | inappropriate x86 IOMMU timeout detection / handling |
CVE-2021-28692
XSA-373 |
| VCID-ndz3-372h-8fhk | FIFO event channels control block related ordering |
CVE-2020-29570
XSA-358 |
| VCID-nhj6-dhyx-xbas | x86: Machine Check Error on Page Size Change DoS |
CVE-2018-12207
XSA-304 |
| VCID-ns7u-fmmr-5ba4 | TSX Asynchronous Abort speculative side channel |
CVE-2019-11135
XSA-305 |
| VCID-p3uc-18e9-skb4 | xenstore watch notifications lacking permission checks |
CVE-2020-29480
XSA-115 |
| VCID-p7ug-wwk5-63gb | out of bounds event channels available to 32-bit x86 domains |
CVE-2020-25600
XSA-342 |
| VCID-pv8w-7nk4-u3eg | x86: PV kernel context switch corruption |
CVE-2019-17347
|
| VCID-pzt3-abab-4kdd | x86 PV guest INVLPG-like flushes may leave stale TLB entries |
CVE-2020-27674
XSA-286 |
| VCID-qg9d-zmph-vufm | find_next_bit() issues |
CVE-2019-19581
|
| VCID-r1ca-najr-xuh6 | x86 shadow: Insufficient TLB flushing when using PCID |
CVE-2019-17348
XSA-294 |
| VCID-rgt3-wkaw-eqca | Information leak via side effects of speculative execution |
CVE-2017-5754
|
| VCID-rn1h-xy8j-uqgs | x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS |
CVE-2018-15468
XSA-269 |
| VCID-rqjg-umw7-vyfu | Bad continuation handling in GNTTABOP_copy |
CVE-2020-11742
XSA-318 |
| VCID-tb5v-mhdb-wbem | insufficient TLB flushing / improper large page mappings with AMD IOMMUs |
CVE-2018-19961
|
| VCID-uvcp-ad38-2kcs | Xenstore: wrong path length check |
CVE-2020-29482
XSA-323 |
| VCID-v17d-ecc6-97au | multiple xenoprof issues |
CVE-2020-11741
|
| VCID-v8fp-rzfq-e3bs | Information leak via side effects of speculative execution |
CVE-2017-5715
|
| VCID-vb2u-yc2z-ayh5 | Missing memory barriers when accessing/allocating an event channel |
CVE-2020-25603
XSA-340 |
| VCID-veqg-epht-cuaz | insufficient TLB flushing / improper large page mappings with AMD IOMMUs |
CVE-2018-19962
XSA-275 |
| VCID-vh89-pyaz-xbdg | Microarchitectural Data Sampling speculative side channel |
CVE-2018-12126
XSA-297 |
| VCID-werg-d7s2-kfbw | x86: DoS from attempting to use INVPCID with a non-canonical addresses |
CVE-2018-19965
XSA-279 |
| VCID-wqv9-j35n-aqen | add-to-physmap can be abused to DoS Arm hosts |
CVE-2019-18423
XSA-301 |
| VCID-wvar-kt63-dkd5 | inverted code paths in x86 dirty VRAM tracking |
CVE-2020-15563
XSA-319 |
| VCID-xe4j-gg7f-wyfa | races with evtchn_reset() |
CVE-2020-25599
XSA-343 |
| VCID-xet6-w2vq-67eq | Missing alignment check in VCPUOP_register_vcpu_info |
CVE-2020-15564
XSA-327 |
| VCID-xubx-wxc9-tfay | x86: Nested VT-x usable even when disabled |
CVE-2018-18883
XSA-278 |
| VCID-yh4r-yysd-1ua5 | oxenstored does not apply quota-maxentity |
CVE-2018-15470
XSA-272 |
| VCID-z9r8-s6v7-zkgd | Microarchitectural Data Sampling speculative side channel |
CVE-2018-12130
|
| VCID-zh3b-cxzx-abc6 | race with pass-through device hotplug |
CVE-2019-17341
|
| VCID-zm6z-2dnk-hyf8 | VMX: VMentry failure with debug exceptions and blocked states |
CVE-2019-19583
XSA-308 |
| VCID-zrxf-3w1d-t3ba | Information leak via power sidechannel |
CVE-2020-28368
XSA-351 |