Vulnerabilities in Xen
153 resultsCVE-2021-28702—PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via ResEPSS 0.4%CVE-2025-58149HIGHIncorrect removal of permissions on PCI device unplugEPSS 0.4%CVE-2022-26362—x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. ThisEPSS 0.4%CVE-2025-58148HIGHx86: Incorrect input sanitisation in Viridian hypercallsEPSS 0.4%CVE-2025-58147HIGHx86: Incorrect input sanitisation in Viridian hypercallsEPSS 0.4%CVE-2025-58143CRITICALMutiple vulnerabilities in the Viridian interfaceEPSS 0.4%CVE-2021-28695—IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corrEPSS 0.4%CVE-2021-28694—IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corrEPSS 0.4%CVE-2026-62434MEDIUMPoD: Don't try to reclaim special pagesEPSS 0.4%CVE-2021-28707—PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corEPSS 0.4%CVE-2025-58145HIGHArm issues with page refcountingEPSS 0.4%CVE-2021-28709—issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vEPSS 0.4%CVE-2021-28705—issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vEPSS 0.4%CVE-2021-28696—IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corrEPSS 0.4%CVE-2026-62431HIGHViridian STIMER division by zeroEPSS 0.4%CVE-2021-28689—x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest kernels run in ring 1. At the time when Xen was dEPSS 0.4%CVE-2022-26363—x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.4%CVE-2022-26358—IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspEPSS 0.4%CVE-2022-26361—IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspEPSS 0.4%CVE-2022-26360—IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspEPSS 0.4%