CVE Program partner

XEN

Xen Project

API
CVEs, 365 days53181 all time, 7 rejected
Quality46%median 99%
CVSS by the CNA20%share of records
CWE20%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA66%lower is better
OrganisationXen Project
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeAll sub-projects under Xen Project’s umbrella (see <a href='https://xenproject.org/developers/teams/' target='_blank'>Xen Project Teams</a>), except those sub-projects that have their own security response process; and the Xen components inside other projects, where Xen Project is the primary developer.
Advisorieshttps://xenbits.xen.org/xsa/

Latest CVEs · RSS

  • CVE-2026-102700 2026-10-13
    With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL pointer check, yet the a
  • CVE-2026-102702 2026-10-13
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) ad
  • CVE-2026-102699 2026-10-13
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) ad
  • CVE-2026-79611 2026-10-13
    For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is acti
  • CVE-2026-79610 2026-10-13
    XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect w
  • CVE-2026-79609 2026-10-13
    XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involves copying 64-bit PV guest page table en
  • CVE-2026-79608 2026-10-13
    The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an invert
  • CVE-2026-79607 2026-10-13
    During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent
  • CVE-2026-79603 2026-09-08
    x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-u
  • CVE-2026-79602 2026-09-08
    A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.
  • CVE-2026-62437 2026-09-08
    When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated remova
  • CVE-2026-62434 2026-07-28
    A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory managem
  • CVE-2026-62433 2026-07-28
    Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a r
  • CVE-2026-62432 2026-07-28
    The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOP_reset,
  • CVE-2026-62431 2026-07-28
    The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a #DE fault.
  • CVE-2026-62430 2026-07-28
    Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the
  • CVE-2026-62429 2026-07-28
    Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration informat
  • CVE-2026-62436 2026-07-28
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introduction of Grant
  • CVE-2026-62435 2026-07-28
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introduction of Grant
  • CVE-2026-62428 2026-07-28
    When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy o
  • CVE-2026-62427 2026-07-28
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl a
  • CVE-2026-62426 2026-07-28
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl a
  • CVE-2026-62425 2026-07-28
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge /
  • CVE-2026-62424 2026-07-28
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge /
  • CVE-2026-62423 2026-07-28
    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge /

All CVE Program partners