Priority LOW 34
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started i…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00366 · Published 2021-11-24 · No fix listed CWE-755
Priority MEDIUM 40
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-dema…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2021-11-24 · Fixed in next of 4.14.x
Priority LOW 38
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-dema…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00374 · Published 2021-11-24 · Fixed in next of 4.14.x
Priority MEDIUM 42
guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.02233 · Published 2021-11-24 · Fixed in next of 4.15.x CWE-770
Priority LOW 34
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started i…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00361 · Published 2021-11-24 · No fix listed CWE-755
Priority LOW 38
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-dema…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2021-11-24 · Fixed in next of 4.14.x
Priority LOW 38
certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (and, on suitable hardware, by default will) be shared between CPUs, for second-…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00285 · Published 2021-11-21 · Fixed in next of xen-unstable CWE-269