390 results · Feed
-
Unscored —
Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track…
-
Unscored —
x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular …
-
Unscored —
x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_…
-
Unscored —
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the te…
-
Unscored —
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the te…
-
Unscored —
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the te…
-
Unscored —
race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bit…
-
Unscored —
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the te…
-
Unscored —
Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x…
-
Unscored —
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappin…
-
Unscored —
arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p…
-
Unscored —
grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain …
-
Unscored —
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text exp…
-
Unscored —
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspect…
-
Unscored —
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text exp…
-
Unscored —
guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be a…
-
Unscored —
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspect…
-
Unscored —
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspect…
-
Unscored —
PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regio…
-
Unscored —
Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The …
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned p…
-
Unscored —
long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the …
-
Unscored —
inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant…
-
Unscored —
xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivilege…
-
Unscored —
xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary…
-
Unscored —
inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operat…
-
Unscored —
x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security v…
-
Unscored —
x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest kernels run in ring 1. At th…
-
Unscored —
Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable informat…
-
Unscored —
AMD Speculative execution with Floating-Point Value Injection
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data …
-
Unscored —
AMD Speculative Code Store Bypass
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.
-
Unscored —
A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/…
-
Unscored —
An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write D…
-
Unscored —
An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are by…
-
Unscored —
An issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored, a owner could give a…