Xen Xen

• CVE-2025-27465 Medium 4.3 x86: Incorrect stubs exception handling for flags recovery 0.7%
• CVE-2024-2201 Medium 4.7 CVE-2024-2201 8.8%
• CVE-2024-45819 Medium 5.5 libxl leaks data to PVH guests via ACPI tables 0.3%
• CVE-2024-45818 Medium 6.5 Deadlock in x86 HVM standard VGA handling 0.3%
• CVE-2024-45817 High 7.3 x86: Deadlock in vlapic_error() 0.5%
• CVE-2024-31146 High 7.5 PCI device pass-through with shared resources 0.2%
• CVE-2024-31145 High 7.5 error handling in x86 IOMMU identity mapping 0.2%
• CVE-2024-31143 High 7.5 double unlock in x86 guest IRQ handling 0.5%
• CVE-2024-31142 High 7.5 x86: Incorrect logic for BTC/SRSO mitigations 17.4%
• CVE-2023-46842 Medium 6.5 x86 HVM hypercalls may trigger Xen bug check 8.5%
• CVE-2023-46841 Medium 6.5 x86: shadow stack vs exceptions from emulation stubs 0.3%
• CVE-2023-46840 Medium 4.1 VT-d: Failure to quarantine devices in !HVM builds 0.3%
• CVE-2023-46839 Medium 5.3 pci: phantom functions assigned to incorrect contexts 0.8%
• CVE-2024-2193 Medium 5.7 Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace. 1.3%
• CVE-2023-46837 Low 3.3 arm32: The cache may not be properly cleaned/invalidated (take two) 0.2%
• CVE-2023-46836 Medium 4.7 x86: BTC/SRSO fixes not fully effective 0.2%
• CVE-2023-46835 Medium 5.5 x86/AMD: mismatch in IOMMU quarantine page table levels 0.3%
• CVE-2023-34328 Medium 5.5 x86/AMD: Debug Mask handling 0.2%
• CVE-2023-34327 Medium 5.5 x86/AMD: Debug Mask handling 0.2%
• CVE-2023-34325 High 7.8 Multiple vulnerabilities in libfsimage disk handling 0.3%
• CVE-2023-34326 High 7.8 x86/AMD: missing IOMMU TLB flushing 0.3%
• CVE-2023-34323 Medium 5.5 xenstored: A transaction conflict can crash C Xenstored 0.2%
• CVE-2023-34322 High 7.8 top-level shadow reference dropped too early for 64-bit PV guests 0.2%
• CVE-2023-34321 Low 3.3 arm32: The cache may not be properly cleaned/invalidated 0.2%
• CVE-2023-34320 Unrated arm: Guests can trigger a deadlock on Cortex-A77 0.2%
• CVE-2022-42336 Low 3.3 Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as 0.3%
• CVE-2022-42335 Unrated x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called 0.3%
• CVE-2022-42333 Unrated x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability contr 1.2%
• CVE-2022-42332 Unrated x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called s 0.3%
• CVE-2022-42334 Unrated x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability contr 0.3%
• CVE-2022-42331 Unrated x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. 0.3%
• CVE-2022-42330 Unrated Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due 1.4%
• CVE-2022-42315 Medium 6.5 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests c 0.3%
• CVE-2022-42309 Unrated Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path, resulting in a crash of xens 0.3%
• CVE-2022-42311 Medium 6.5 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests c 0.3%
• CVE-2022-42323 Unrated Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Sinc 0.3%
• CVE-2022-42312 Medium 6.5 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests c 0.3%
• CVE-2022-42316 Medium 6.5 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests c 0.3%
• CVE-2022-42327 High 7.1 x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out 0.2%
• CVE-2022-42325 Unrated Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 0.3%
• CVE-2022-42317 Medium 6.5 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests c 0.3%
• CVE-2022-42319 Unrated Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of memory temporarily. This memory is freed 0.3%
• CVE-2022-42322 Unrated Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Sinc 0.3%
• CVE-2022-42318 Medium 6.5 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests c 0.3%
• CVE-2022-42310 Unrated Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the 0.3%
• CVE-2022-42326 Medium 5.5 Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 0.3%
• CVE-2022-42324 Unrated Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the ring and casts it directly to an Ocaml i 0.3%
• CVE-2022-42320 Unrated Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. When a domain is gone, there might be Xenstore nodes left with access rights contain 0.3%
• CVE-2022-42313 Medium 6.5 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests c 0.3%
• CVE-2022-42314 Medium 6.5 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests c 0.3%