CVE-2021-28701

CVE-2021-28701: fallo en xen

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Xen+ Monitorear xen

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.3%
Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, are de-allocated when a guest switches (back) from v2 to v1. Freeing such pages requires that the hypervisor enforce that no parallel request can result in the addition of a mapping of such a page to a guest. That enforcement was missing, allowing guests to retain access to pages that were freed and perhaps re-used for other purposes. Unfortunately, when XSA-379 was being prepared, this similar issue was not noticed.
Productos afectados
Xen · xen
CVEs relacionadas — xen

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-28706—CVE-2021-28706EPSS 2.2%CVE-2021-28700—CVE-2021-28700EPSS 1.9%CVE-2022-42330—CVE-2022-42330EPSS 1.4%CVE-2022-42333—CVE-2022-42333EPSS 1.2%CVE-2021-28690—CVE-2021-28690EPSS 1.0%CVE-2022-26364—CVE-2022-26364EPSS 0.5%