Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Micro 5.0 package xen, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (33)
CVE-2021-28704 — CVSS 8.8 (high): PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
CVE-2021-28708 — CVSS 8.8 (high): PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
CVE-2021-28707 — CVSS 8.8 (high): PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
CVE-2021-28706 — CVSS 8.6 (high): guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue…
CVE-2022-26361 — CVSS 7.8 (high): IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which…
CVE-2021-28697 — CVSS 7.8 (high): grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The…
CVE-2021-28701 — CVSS 7.8 (high): Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such…
CVE-2021-28705 — CVSS 7.8 (high): issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which…
CVE-2021-28709 — CVSS 7.8 (high): issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which…
CVE-2022-23033 — CVSS 7.8 (high): arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm…
CVE-2022-26358 — CVSS 7.8 (high): IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which…
CVE-2022-26359 — CVSS 7.8 (high): IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which…
CVE-2022-26360 — CVSS 7.8 (high): IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which…
CVE-2021-28702 — CVSS 7.6 (high): PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via…
CVE-2021-28692 — CVSS 7.1 (high): inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s)…
CVE-2022-26357 — CVSS 7.0 (high): race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain…
CVE-2021-28694 — CVSS 6.8 (medium): IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
CVE-2021-28696 — CVSS 6.8 (medium): IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
CVE-2021-28695 — CVSS 6.8 (medium): IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
CVE-2022-0001 — CVSS 6.5 (medium): Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to…
CVE-2021-0089 — CVSS 6.5 (medium): Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via…
CVE-2021-28690 — CVSS 6.5 (medium): x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please…
CVE-2022-0002 — CVSS 6.5 (medium): Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable…
CVE-2022-26356 — CVSS 5.6 (medium): Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram…
CVE-2021-28698 — CVSS 5.5 (medium): long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a…
CVE-2021-28687 — CVSS 5.5 (medium): HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and…
CVE-2021-3308 — CVSS 5.5 (medium): An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force…
CVE-2021-28693 — CVSS 5.5 (medium): xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary area before they…
CVE-2022-23034 — CVSS 5.5 (medium): A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case…
CVE-2021-28699 — CVSS 5.5 (medium): inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is…
CVE-2021-28700 — CVSS 4.9 (medium): xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly…
CVE-2022-23035 — CVSS 4.6 (medium): Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests…