CVE-2022-33746
Published Oct 11, 2022P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time th…
Vendor archive
xen CVEs
Beta · best-effort495 CVEs tagged to vendor xen — 15 Critical, 162 High, 267 Medium, 51 Low, 0 Unrated.
CVE-2022-33745
Published Jul 26, 2022insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode.…
CVE-2022-29900
Published Jul 12, 2022Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.
- evidence mentions
- 6
- Buzz score
- 32.5
CVE-2022-33743
Published Jul 5, 2022network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code label was moved in a way allowing for SKBs having referenc…
CVE-2022-33742
Published Jul 5, 2022Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block an…
CVE-2022-33741
Published Jul 5, 2022Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block an…
CVE-2022-33740
Published Jul 5, 2022Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block an…
CVE-2022-26365
Published Jul 5, 2022Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block an…
CVE-2022-21166
Published Jun 15, 2022Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via loca…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-21127
Published Jun 15, 2022Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-21125
Published Jun 15, 2022Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-21123
Published Jun 15, 2022Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-26364
Published Jun 9, 2022x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE…
CVE-2022-26363
Published Jun 9, 2022x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE…
CVE-2022-26362
Published Jun 9, 2022x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants…
CVE-2022-26361
Published Apr 5, 2022IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whic…
CVE-2022-26360
Published Apr 5, 2022IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whic…
CVE-2022-26359
Published Apr 5, 2022IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whic…
CVE-2022-26358
Published Apr 5, 2022IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whic…
CVE-2022-26357
Published Apr 5, 2022race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a p…
CVE-2022-26356
Published Apr 5, 2022Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_track_dirty_vram befo…
CVE-2022-23960
Published Mar 13, 2022Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in th…
- evidence mentions
- 4
- Buzz score
- 25.6
CVE-2022-23042
Published Mar 10, 2022Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to wh…
CVE-2022-23041
Published Mar 10, 2022Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to wh…
CVE-2022-23040
Published Mar 10, 2022Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to wh…
Showing 76-100 of 495 CVEsPage 4 of 20