CVE catalog

CVE-2021-28689

xen: CVE-2021-28689

Severity: Medium · CVSS 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Published: May 4, 2021, 12:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.36% · Oct 25, 2026

x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest kernels run in ring 1. At the time when Xen was developed, this area of the i386 architecture was rarely used, which is why Xen was able to use it to implement paravirtualisation, Xen's novel approach to virtualization. In AMD64, Xen had to use a different implementation approach, so Xen does not use ring 1 to support 64-bit guests. With the focus now being on 64-bit systems, and the availability of explicit hardware support for virtualization, fixing speculation issues in ring 1 is not a priority for processor companies. Indirect Branch Restricted Speculation (IBRS) is an architectural x86 extension put together to combat speculative execution sidechannel attacks, including Spectre v2. It was retrofitted in microcode to existing CPUs. For more details on Spectre v2, see: http://xenbits.xen.org/xsa/advisory-254.html However, IBRS does not architecturally protect ring 0 from predictions learnt in ring 1. For more details, see: https://software.intel.com/security-software-guidance/deep-dives/deep-dive-indirect-branch-restricted-speculation Similar situations may exist with other mitigations for other kinds of speculative execution attacks. The situation is quite likely to be similar for speculative execution attacks which have yet to be discovered, disclosed, or mitigated.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	xen	bookworm	Not reported	vulnerable
Debian	xen	bookworm	Not reported	vulnerable
Debian	xen	12	`4.17.1+2-gb773c48e36-1`	vulnerable
Debian	xen	12	`4.17.2+55-g0b56bed864-1`	vulnerable
Debian	xen	12	`4.17.2+76-ge1f9cb16e2-1`	vulnerable
Debian	xen	12	`4.17.2+76-ge1f9cb16e2-1~deb12u1`	vulnerable
Debian	xen	12	`4.17.2-1`	vulnerable
Debian	xen	12	`4.17.3+10-g091466ba55-1`	vulnerable
Debian	xen	12	`4.17.3+10-g091466ba55-1.1`	vulnerable
Debian	xen	12	`4.17.3+10-g091466ba55-1.1~exp1`	vulnerable
Debian	xen	12	`4.17.3+10-g091466ba55-1.1~exp2`	vulnerable
Debian	xen	12	`4.17.3+10-g091466ba55-1~deb12u1`	vulnerable
Debian	xen	12	`4.17.3+36-g54dacb5c02-1`	vulnerable
Debian	xen	12	`4.17.5+23-ga4e5191dc0-1`	vulnerable
Debian	xen	12	`4.17.5+23-ga4e5191dc0-1+deb12u1`	vulnerable
Debian	xen	12	`4.17.5+72-g01140da4e8-1`	vulnerable
Debian	xen	12	`4.19.0+14-g0918434e0f-1~exp1`	vulnerable
Debian	xen	12	`4.19.1-1`	vulnerable
Debian	xen	12	`4.19.1-1~exp1`	vulnerable
Debian	xen	12	`4.19.1-1~exp4`	vulnerable
Debian	xen	12	`4.20.0+68-g35cb38b222-1`	vulnerable
Debian	xen	12	`4.20.0-1`	vulnerable
Debian	xen	12	`4.20.0~rc2+1-gfcde5e0de8-1~exp1`	vulnerable
Debian	xen	12	`4.20.2+37-g61ff35323e-1`	vulnerable
Debian	xen	12	`4.20.2+7-g1badcf5035-1`	vulnerable
Debian	xen	12	`4.20.2+7-g1badcf5035-2`	vulnerable
Debian	xen	12	`4.20.3+127-gc42374a105-1`	vulnerable
Debian	xen	13	`4.20.0+68-g35cb38b222-1`	vulnerable
Debian	xen	13	`4.20.2+37-g61ff35323e-0+deb13u1`	vulnerable
Debian	xen	13	`4.20.2+37-g61ff35323e-1`	vulnerable
Debian	xen	13	`4.20.2+7-g1badcf5035-0+deb13u1`	vulnerable
Debian	xen	13	`4.20.2+7-g1badcf5035-1`	vulnerable
Debian	xen	13	`4.20.2+7-g1badcf5035-2`	vulnerable
Debian	xen	13	`4.20.3+127-gc42374a105-0+deb13u1`	vulnerable
Debian	xen	13	`4.20.3+127-gc42374a105-1`	vulnerable
Debian	xen	14	`4.20.0+68-g35cb38b222-1`	vulnerable
Debian	xen	14	`4.20.2+37-g61ff35323e-1`	vulnerable
Debian	xen	14	`4.20.2+7-g1badcf5035-1`	vulnerable
Debian	xen	14	`4.20.2+7-g1badcf5035-2`	vulnerable
Debian	xen	14	`4.20.3+127-gc42374a105-1`	vulnerable
Suse	xen	linux enterprise high performance computing 15-espos	`4.10.4_40-150000.3.84.1`	fixed
Suse	xen	linux enterprise high performance computing 15-ltss	`4.10.4_40-150000.3.84.1`	fixed
Suse	xen	linux enterprise server for sap applications 15	`4.10.4_40-150000.3.84.1`	fixed
Suse	xen	linux enterprise module for basesystem 15 sp3	`4.14.5_06-150300.3.35.1`	fixed
Suse	xen	linux enterprise module for server applications 15 sp3	`4.14.5_06-150300.3.35.1`	fixed
Suse	xen	linux enterprise micro 5.1	`4.14.5_06-150300.3.35.1`	fixed
Suse	xen	linux enterprise micro 5.2	`4.14.5_06-150300.3.35.1`	fixed
Opensuse	xen	leap micro 5.2	`4.14.5_06-150300.3.35.1`	fixed
Opensuse	xen	leap 15.3	`4.14.5_06-150300.3.35.1`	fixed
Suse	xen	linux enterprise software development kit 12 sp5	`4.12.4_28-3.77.1`	fixed
Suse	xen	linux enterprise server 12 sp5	`4.12.4_28-3.77.1`	fixed
Suse	xen	linux enterprise server for sap applications 12 sp5	`4.12.4_28-3.77.1`	fixed
Suse	xen	linux enterprise high performance computing 15 sp1-espos	`4.12.4_30-150100.3.80.1`	fixed
Suse	xen	linux enterprise high performance computing 15 sp1-ltss	`4.12.4_30-150100.3.80.1`	fixed
Suse	xen	linux enterprise server 15 sp1-bcl	`4.12.4_30-150100.3.80.1`	fixed
Suse	xen	linux enterprise server 15 sp1-ltss	`4.12.4_30-150100.3.80.1`	fixed
Suse	xen	linux enterprise server for sap applications 15 sp1	`4.12.4_30-150100.3.80.1`	fixed
Suse	xen	enterprise storage 6	`4.12.4_30-150100.3.80.1`	fixed
Suse	xen	linux enterprise server 12 sp2-bcl	`4.7.6_28-43.98.1`	fixed
Suse	xen	openstack cloud 9	`4.11.4_34-2.83.1`	fixed
Suse	xen	openstack cloud crowbar 9	`4.11.4_34-2.83.1`	fixed
Suse	xen	linux enterprise server for sap applications 12 sp4	`4.11.4_34-2.83.1`	fixed
Suse	xen	linux enterprise server 12 sp4-ltss	`4.11.4_34-2.83.1`	fixed
Suse	xen	linux enterprise high performance computing 15 sp2-espos	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	linux enterprise high performance computing 15 sp2-ltss	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	linux enterprise server 15 sp2-bcl	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	linux enterprise server 15 sp2-ltss	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	linux enterprise server for sap applications 15 sp2	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	manager proxy 4.1	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	manager retail branch server 4.1	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	manager server 4.1	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	enterprise storage 7	`4.13.4_16-150200.3.65.1`	fixed
Suse	xen	openstack cloud 9	`4.11.4_18-2.54.1`	fixed
Suse	xen	openstack cloud crowbar 9	`4.11.4_18-2.54.1`	fixed
Suse	xen	linux enterprise server for sap applications 12 sp4	`4.11.4_18-2.54.1`	fixed
Suse	xen	linux enterprise server 12 sp4-ltss	`4.11.4_18-2.54.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Suse	xen	rpm	linux enterprise high performance computing 15-espos	`4.10.4_40-150000.3.84.1`	Not reported	SUSE-SU-2022:3925-1	Not reported
Suse	xen	rpm	linux enterprise high performance computing 15-ltss	`4.10.4_40-150000.3.84.1`	Not reported	SUSE-SU-2022:3925-1	Not reported
Suse	xen	rpm	linux enterprise server for sap applications 15	`4.10.4_40-150000.3.84.1`	Not reported	SUSE-SU-2022:3925-1	Not reported
Suse	xen	rpm	linux enterprise module for basesystem 15 sp3	`4.14.5_06-150300.3.35.1`	Not reported	SUSE-SU-2022:3665-1	Not reported
Suse	xen	rpm	linux enterprise module for server applications 15 sp3	`4.14.5_06-150300.3.35.1`	Not reported	SUSE-SU-2022:3665-1	Not reported
Suse	xen	rpm	linux enterprise micro 5.1	`4.14.5_06-150300.3.35.1`	Not reported	SUSE-SU-2022:3665-1	Not reported
Suse	xen	rpm	linux enterprise micro 5.2	`4.14.5_06-150300.3.35.1`	Not reported	SUSE-SU-2022:3665-1	Not reported
Opensuse	xen	rpm	leap micro 5.2	`4.14.5_06-150300.3.35.1`	Not reported	SUSE-SU-2022:3665-1	Not reported
Opensuse	xen	rpm	leap 15.3	`4.14.5_06-150300.3.35.1`	Not reported	SUSE-SU-2022:3665-1	Not reported
Suse	xen	rpm	linux enterprise software development kit 12 sp5	`4.12.4_28-3.77.1`	Not reported	SUSE-SU-2022:3728-1	Not reported
Suse	xen	rpm	linux enterprise server 12 sp5	`4.12.4_28-3.77.1`	Not reported	SUSE-SU-2022:3728-1	Not reported
Suse	xen	rpm	linux enterprise server for sap applications 12 sp5	`4.12.4_28-3.77.1`	Not reported	SUSE-SU-2022:3728-1	Not reported
Suse	xen	rpm	linux enterprise high performance computing 15 sp1-espos	`4.12.4_30-150100.3.80.1`	Not reported	SUSE-SU-2022:3928-1	Not reported
Suse	xen	rpm	linux enterprise high performance computing 15 sp1-ltss	`4.12.4_30-150100.3.80.1`	Not reported	SUSE-SU-2022:3928-1	Not reported
Suse	xen	rpm	linux enterprise server 15 sp1-bcl	`4.12.4_30-150100.3.80.1`	Not reported	SUSE-SU-2022:3928-1	Not reported
Suse	xen	rpm	linux enterprise server 15 sp1-ltss	`4.12.4_30-150100.3.80.1`	Not reported	SUSE-SU-2022:3928-1	Not reported
Suse	xen	rpm	linux enterprise server for sap applications 15 sp1	`4.12.4_30-150100.3.80.1`	Not reported	SUSE-SU-2022:3928-1	Not reported
Suse	xen	rpm	enterprise storage 6	`4.12.4_30-150100.3.80.1`	Not reported	SUSE-SU-2022:3928-1	Not reported
Suse	xen	rpm	linux enterprise server 12 sp2-bcl	`4.7.6_28-43.98.1`	Not reported	SUSE-SU-2022:4051-1	Not reported
Suse	xen	rpm	openstack cloud 9	`4.11.4_34-2.83.1`	Not reported	SUSE-SU-2022:4241-1	Not reported
Suse	xen	rpm	openstack cloud crowbar 9	`4.11.4_34-2.83.1`	Not reported	SUSE-SU-2022:4241-1	Not reported
Suse	xen	rpm	linux enterprise server for sap applications 12 sp4	`4.11.4_34-2.83.1`	Not reported	SUSE-SU-2022:4241-1	Not reported
Suse	xen	rpm	linux enterprise server 12 sp4-ltss	`4.11.4_34-2.83.1`	Not reported	SUSE-SU-2022:4241-1	Not reported
Suse	xen	rpm	linux enterprise high performance computing 15 sp2-espos	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	linux enterprise high performance computing 15 sp2-ltss	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	linux enterprise server 15 sp2-bcl	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	linux enterprise server 15 sp2-ltss	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	linux enterprise server for sap applications 15 sp2	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	manager proxy 4.1	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	manager retail branch server 4.1	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	manager server 4.1	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	enterprise storage 7	`4.13.4_16-150200.3.65.1`	Not reported	SUSE-SU-2022:3971-1	Not reported
Suse	xen	rpm	openstack cloud 9	`4.11.4_18-2.54.1`	Not reported	SUSE-SU-2021:1648-1	Not reported
Suse	xen	rpm	openstack cloud crowbar 9	`4.11.4_18-2.54.1`	Not reported	SUSE-SU-2021:1648-1	Not reported
Suse	xen	rpm	linux enterprise server for sap applications 12 sp4	`4.11.4_18-2.54.1`	Not reported	SUSE-SU-2021:1648-1	Not reported
Suse	xen	rpm	linux enterprise server 12 sp4-ltss	`4.11.4_18-2.54.1`	Not reported	SUSE-SU-2021:1648-1	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libxencall1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxen-dev]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxendevicemodel1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenevtchn1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenforeignmemory1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxengnttab1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenhypfs1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenmisc4.17]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenstore4]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxentoolcore1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxentoollog1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-doc]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-amd64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-amd64-dbg]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-arm64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-arm64-dbg]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-common]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xenstore-utils]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-system-amd64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-system-arm64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Affected
  dsa · xen · debian · bookworm; dsa · xen · debian · 12

Next results

Observed: Oct 23, 2026, 5:55:31 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]