XEN vulnerabilities
153 CVEs and advisories name XEN as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-1713deadlock potential with VT-d and legacy PCI device pass-through
- CVE-2025-27465x86: Incorrect stubs exception handling for flags recovery
- CVE-2024-2201CVE-2024-2201
- CVE-2024-45819libxl leaks data to PVH guests via ACPI tables
- CVE-2024-45818Deadlock in x86 HVM standard VGA handling
- CVE-2024-45817x86: Deadlock in vlapic_error()
- CVE-2024-31146PCI device pass-through with shared resources
- CVE-2024-31145error handling in x86 IOMMU identity mapping
- CVE-2024-31143double unlock in x86 guest IRQ handling
- CVE-2024-31142x86: Incorrect logic for BTC/SRSO mitigations
- CVE-2023-46842x86 HVM hypercalls may trigger Xen bug check
- CVE-2023-46841x86: shadow stack vs exceptions from emulation stubs
- CVE-2023-46840VT-d: Failure to quarantine devices in !HVM builds
- CVE-2023-46839pci: phantom functions assigned to incorrect contexts
- CVE-2024-2193Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.
- CVE-2023-46837arm32: The cache may not be properly cleaned/invalidated (take two)
- CVE-2023-46836x86: BTC/SRSO fixes not fully effective
- CVE-2023-46835x86/AMD: mismatch in IOMMU quarantine page table levels
- CVE-2023-34328x86/AMD: Debug Mask handling
- CVE-2023-34327x86/AMD: Debug Mask handling
- CVE-2023-34325Multiple vulnerabilities in libfsimage disk handling
- CVE-2023-34326x86/AMD: missing IOMMU TLB flushing
- CVE-2023-34323xenstored: A transaction conflict can crash C Xenstored
- CVE-2023-34322top-level shadow reference dropped too early for 64-bit PV guests
- CVE-2023-34321arm32: The cache may not be properly cleaned/invalidated
- CVE-2023-34320arm: Guests can trigger a deadlock on Cortex-A77
- CVE-2022-42336Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires
- CVE-2022-42335x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted P
- CVE-2022-42334x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerab
- CVE-2022-42333x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerab