Search for packages
| purl | pkg:deb/debian/xen@4.17.5%2B72-g01140da4e8-1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 2.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-qpfc-3296-9ub3
Aliases: CVE-2026-23553 XSA-479 |
x86: incomplete IBPB for vCPU isolation |
Affected by 2 other vulnerabilities. |
|
VCID-upju-tcz7-efg1
Aliases: CVE-2025-58150 XSA-477 |
x86: buffer overrun with shadow paging + tracing |
Affected by 2 other vulnerabilities. |
|
VCID-wx6w-6y5m-fugn
Aliases: CVE-2026-23554 XSA-480 |
Use after free of paging structures in EPT | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1tb8-t91c-63bp | x86: Native Branch History Injection |
CVE-2024-2201
XSA-456 |
| VCID-26a9-9zz3-wfhh | x86: Incorrect input sanitisation in Viridian hypercalls |
CVE-2025-58147
XSA-475 |
| VCID-2trm-w3ww-cfhk | Mutiple vulnerabilities in the Viridian interface |
CVE-2025-27466
|
| VCID-3bw4-631f-e7h6 | arm32: The cache may not be properly cleaned/invalidated |
CVE-2023-34321
XSA-437 |
| VCID-3se4-qv6j-xqfq | double unlock in x86 guest IRQ handling |
CVE-2024-31143
XSA-458 |
| VCID-3vdg-5g64-wkbt | x86: shadow stack vs exceptions from emulation stubs |
CVE-2023-46841
XSA-451 |
| VCID-46ad-1k9n-j3hm | Linux disk/nic frontends data leaks |
CVE-2022-26365
|
| VCID-4cdt-ycjx-6ub4 | Linux disk/nic frontends data leaks |
CVE-2022-33741
XSA-403 |
| VCID-4k7p-3g95-n7dm | Deadlock in x86 HVM standard VGA handling |
CVE-2024-45818
XSA-463 |
| VCID-4pra-prf3-1uff | Incorrect removal of permissions on PCI device unplug |
CVE-2025-58149
XSA-476 |
| VCID-4rmg-db7g-u3hs | pci: phantom functions assigned to incorrect contexts |
CVE-2023-46839
XSA-449 |
| VCID-5ktg-bhh1-ubbz | arm: Guests can trigger a deadlock on Cortex-A77 |
CVE-2023-34320
XSA-436 |
| VCID-5u88-jt28-cfb6 | deadlock potential with VT-d and legacy PCI device pass-through |
CVE-2025-1713
XSA-467 |
| VCID-6dax-cddv-7bbs | x86/AMD: Debug Mask handling |
CVE-2023-34328
XSA-444 |
| VCID-6jqj-2qwn-8qd9 | x86/AMD: Debug Mask handling |
CVE-2023-34327
|
| VCID-8k1q-b2kj-w7hh | Multiple vulnerabilities in libfsimage disk handling |
CVE-2023-34325
XSA-443 |
| VCID-8tv5-zxmm-r3fk | x86/AMD: Divide speculative information leak |
CVE-2023-20588
XSA-439 |
| VCID-97zm-r9b6-uqdu | xenstored: A transaction conflict can crash C Xenstored |
CVE-2023-34323
XSA-440 |
| VCID-b57c-x3pw-7fb7 | top-level shadow reference dropped too early for 64-bit PV guests |
CVE-2023-34322
XSA-438 |
| VCID-bhdk-jmss-4qc8 | x86: BTC/SRSO fixes not fully effective |
CVE-2023-46836
XSA-446 |
| VCID-byu1-7n9c-5fes | GhostRace: Speculative Race Conditions |
CVE-2024-2193
XSA-453 |
| VCID-c4xu-szkm-1kh6 | Arm issues with page refcounting |
CVE-2025-58145
|
| VCID-ee3z-24pr-kqcm | error handling in x86 IOMMU identity mapping |
CVE-2024-31145
XSA-460 |
| VCID-ejhc-6yqt-gkgv | x86: Indirect Target Selection |
CVE-2024-28956
XSA-469 |
| VCID-evcg-2z3p-gbch | PCI device pass-through with shared resources |
CVE-2024-31146
|
| VCID-h9hz-vur7-kyhg | x86: Incorrect input sanitisation in Viridian hypercalls |
CVE-2025-58148
|
| VCID-j22f-mbqe-a7dk | x86: Transitive Scheduler Attacks |
CVE-2024-36350
|
| VCID-p2fk-8snj-x7dy | x86: Register File Data Sampling |
CVE-2023-28746
XSA-452 |
| VCID-psaa-jdr7-e3fm | libxl leaks data to PVH guests via ACPI tables |
CVE-2024-45819
XSA-464 |
| VCID-q3p3-tgay-6kcs | Linux disk/nic frontends data leaks |
CVE-2022-33740
|
| VCID-qsma-2ufh-jybe | Xenstored DoS by unprivileged domain |
CVE-2026-23555
XSA-481 |
| VCID-rdub-9bhg-nbc6 | x86: Deadlock in vlapic_error() |
CVE-2024-45817
XSA-462 |
| VCID-rk2f-yqbb-nyd2 | arm32: The cache may not be properly cleaned/invalidated (take two) |
CVE-2023-46837
XSA-447 |
| VCID-rt5n-e4wq-p3gh | x86 HVM hypercalls may trigger Xen bug check |
CVE-2023-46842
XSA-454 |
| VCID-tjgh-waa3-wqgk | Arm issues with page refcounting |
CVE-2025-58144
XSA-473 |
| VCID-uv8m-bj4c-8fes | x86: Transitive Scheduler Attacks |
CVE-2024-36357
XSA-471 |
| VCID-vv23-mvyn-87hg | Mutiple vulnerabilities in the Viridian interface |
CVE-2025-58143
|
| VCID-wd4s-jxuf-skbp | x86/AMD: mismatch in IOMMU quarantine page table levels |
CVE-2023-46835
XSA-445 |
| VCID-wz1m-aeaf-nkg7 | Mutiple vulnerabilities in the Viridian interface |
CVE-2025-58142
XSA-472 |
| VCID-xqpz-y83m-4uc4 | x86: Incorrect stubs exception handling for flags recovery |
CVE-2025-27465
XSA-470 |
| VCID-ye1t-qhtx-sucm | x86/AMD: missing IOMMU TLB flushing |
CVE-2023-34326
XSA-442 |
| VCID-z9rm-9p2q-wfag | x86: Incorrect logic for BTC/SRSO mitigations |
CVE-2024-31142
XSA-455 |
| VCID-zkeg-d5d5-vbda | Linux disk/nic frontends data leaks |
CVE-2022-33742
|