CVE catalog

CVE-2019-19578

xen: CVE-2019-19578

Severity: High · CVSS 7.5CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Published: Dec 11, 2019, 6:16:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.39% · Oct 25, 2026

An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via degenerate chains of linear pagetables, because of an incorrect fix for CVE-2017-15595. "Linear pagetables" is a technique which involves either pointing a pagetable at itself, or to another pagetable of the same or higher level. Xen has limited support for linear pagetables: A page may either point to itself, or point to another pagetable of the same level (i.e., L2 to L2, L3 to L3, and so on). XSA-240 introduced an additional restriction that limited the "depth" of such chains by allowing pages to either *point to* other pages of the same level, or *be pointed to* by other pages of the same level, but not both. To implement this, we keep track of the number of outstanding times a page points to or is pointed to another page table, to prevent both from happening at the same time. Unfortunately, the original commit introducing this reset this count when resuming validation of a partially-validated pagetable, incorrectly dropping some "linear_pt_entry" counts. If an attacker could engineer such a situation to occur, they might be able to make loops or other arbitrary chains of linear pagetables, as described in XSA-240. A malicious or buggy PV guest may cause the hypervisor to crash, resulting in Denial of Service (DoS) affecting the entire host. Privilege escalation and information leaks cannot be excluded. All versions of Xen are vulnerable. Only x86 systems are affected. Arm systems are not affected. Only x86 PV guests can leverage the vulnerability. x86 HVM and PVH guests cannot leverage the vulnerability. Only systems which have enabled linear pagetables are vulnerable. Systems which have disabled linear pagetables, either by selecting CONFIG_PV_LINEAR_PT=n when building the hypervisor, or adding pv-linear-pt=false on the command-line, are not vulnerable.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	xen	sid	`4.20.4+39-gf1e1321c87-1`	fixed
Debian	xen	forky	`4.20.4+39-gf1e1321c87-1`	fixed
Debian	xen	trixie	`4.20.3+127-gc42374a105-0+deb13u1`	fixed
Debian	xen	trixie-security	`4.20.4+39-gf1e1321c87-0+deb13u1`	fixed
Debian	xen	bookworm	`4.17.5+72-g01140da4e8-1`	fixed
Debian	xen	bookworm-security	`4.17.7-0+deb12u1`	fixed
Alpine	xen	3.10	`4.12.2-r0`	fixed
Alpine	xen	3.11	`4.13.0-r0`	fixed
Alpine	xen	3.12	`4.13.0-r0`	fixed
Alpine	xen	3.13	`4.13.0-r0`	fixed
Alpine	xen	3.14	`4.13.0-r0`	fixed
Alpine	xen	3.15	`4.13.0-r0`	fixed
Alpine	xen	3.16	`4.13.0-r0`	fixed
Alpine	xen	3.17	`4.13.0-r0`	fixed
Alpine	xen	3.18	`4.13.0-r0`	fixed
Alpine	xen	3.19	`4.13.0-r0`	fixed
Alpine	xen	3.20	`4.13.0-r0`	fixed
Alpine	xen	3.21	`4.13.0-r0`	fixed
Alpine	xen	3.22	`4.13.0-r0`	fixed
Alpine	xen	3.23	`4.13.0-r0`	fixed
Alpine	xen	3.24	`4.13.0-r0`	fixed
Alpine	xen	3.8	`4.10.4-r2`	fixed
Alpine	xen	3.9	`4.11.3-r1`	fixed
Ubuntu	xen	16.04	`4.5.1-0ubuntu1`	vulnerable
Ubuntu	xen	16.04	`4.5.1-0ubuntu2`	vulnerable
Ubuntu	xen	16.04	`4.6.0-1ubuntu1`	vulnerable
Ubuntu	xen	16.04	`4.6.0-1ubuntu2`	vulnerable
Ubuntu	xen	16.04	`4.6.0-1ubuntu4`	vulnerable
Ubuntu	xen	16.04	`4.6.0-1ubuntu4.1`	vulnerable
Ubuntu	xen	16.04	`4.6.0-1ubuntu4.2`	vulnerable
Ubuntu	xen	16.04	`4.6.0-1ubuntu4.3`	vulnerable
Ubuntu	xen	16.04	`4.6.5-0ubuntu1`	vulnerable
Ubuntu	xen	16.04	`4.6.5-0ubuntu1.1`	vulnerable
Ubuntu	xen	16.04	`4.6.5-0ubuntu1.2`	vulnerable
Ubuntu	xen	16.04	`4.6.5-0ubuntu1.4`	vulnerable
Ubuntu	xen	18.04	`4.9.0-0ubuntu3`	vulnerable
Ubuntu	xen	18.04	`4.9.0-0ubuntu4`	vulnerable
Ubuntu	xen	18.04	`4.9.2-0ubuntu1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	xen	source	sid	`4.11.3+24-g14b62ab3e5-1`	not yet assigned	Not reported	[947944]
Debian	xen	source	forky	`4.11.3+24-g14b62ab3e5-1`	not yet assigned	Not reported	[947944]
Debian	xen	source	trixie	`4.11.3+24-g14b62ab3e5-1`	not yet assigned	Not reported	[947944]
Debian	xen	source	bookworm	`4.11.3+24-g14b62ab3e5-1`	not yet assigned	Not reported	[947944]
Alpine	xen	apk	3.10	`4.12.2-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.11	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.12	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.13	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.14	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.15	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.16	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.17	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.18	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.19	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.20	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.21	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.22	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.23	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.24	`4.13.0-r0`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.8	`4.10.4-r2`	Not reported	ALPINE-CVE-2019-19578	Not reported
Alpine	xen	apk	3.9	`4.11.3-r1`	Not reported	ALPINE-CVE-2019-19578	Not reported

[Debian bug #947944]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libxencall1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxen-dev]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxendevicemodel1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenevtchn1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenforeignmemory1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxengnttab1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenhypfs1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenmisc4.17]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenstore4]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxentoolcore1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxentoollog1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-doc]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-amd64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-amd64-dbg]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-arm64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-arm64-dbg]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-common]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xenstore-utils]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-system-amd64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-system-arm64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.3+24-g14b62ab3e5-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12

Next results

Observed: Oct 23, 2026, 5:43:19 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]