{"id":"CVE-2021-3308","aliases":["ALPINE-CVE-2021-3308","DEBIAN-CVE-2021-3308","EUVD-2021-26642","GHSA-4gx5-7c23-79mh","SUSE-SU-2021:1023-1","SUSE-SU-2021:1028-1","SUSE-SU-2021:1460-1","SUSE-SU-2021:2955-1","UBUNTU-CVE-2021-3308"],"status":"published","title":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest...","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00419,"percentile":0.36545,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-01-26T19:58:23Z","modified":"2026-10-23T18:03:59Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"xen","fixed_in":["4.13.2-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"xen","fixed_in":["4.13.2-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"xen","fixed_in":["4.14.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xen","fixed_in":["4.14.1-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.14.1+11-gb0b734a8b3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.14.1+11-gb0b734a8b3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.14.1+11-gb0b734a8b3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.13.2-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.13.2-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.1"},{"fixed":"4.14.1-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1+11-gb0b734a8b3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1+11-gb0b734a8b3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.1+11-gb0b734a8b3-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_09-3.39.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_09-3.39.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_09-3.39.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2_08-3.25.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2_08-3.25.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.2_08-3.25.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_08-3.43.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_20-2.60.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_20-2.60.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_20-2.60.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_20-2.60.1"}]}],"bundled":14}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"xen","product":"xen"}],"references":[{"url":"http://xenbits.xen.org/xsa/advisory-360.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2021/01/26/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202107-30","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3308"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/"},{"url":"https://github.com/advisories/GHSA-4gx5-7c23-79mh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3308","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3308","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211023-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027519","tags":["report"]},{"url":"https://bugzilla.suse.com/1177112","tags":["report"]},{"url":"https://bugzilla.suse.com/1177204","tags":["report"]},{"url":"https://bugzilla.suse.com/1178591","tags":["report"]},{"url":"https://bugzilla.suse.com/1178736","tags":["report"]},{"url":"https://bugzilla.suse.com/1179148","tags":["report"]},{"url":"https://bugzilla.suse.com/1181254","tags":["report"]},{"url":"https://bugzilla.suse.com/1181989","tags":["report"]},{"url":"https://bugzilla.suse.com/1182846","tags":["report"]},{"url":"https://bugzilla.suse.com/1183072","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3308","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211028-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1180690","tags":["report"]},{"url":"https://bugzilla.suse.com/1182576","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211460-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212955-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182654","tags":["report"]},{"url":"https://bugzilla.suse.com/1186429","tags":["report"]},{"url":"https://bugzilla.suse.com/1186433","tags":["report"]},{"url":"https://bugzilla.suse.com/1186434","tags":["report"]},{"url":"https://bugzilla.suse.com/1187369","tags":["report"]},{"url":"https://bugzilla.suse.com/1187376","tags":["report"]},{"url":"https://bugzilla.suse.com/1187378","tags":["report"]},{"url":"https://bugzilla.suse.com/1189373","tags":["report"]},{"url":"https://bugzilla.suse.com/1189376","tags":["report"]},{"url":"https://bugzilla.suse.com/1189378","tags":["report"]},{"url":"https://bugzilla.suse.com/1189380","tags":["report"]},{"url":"https://bugzilla.suse.com/1189882","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-0089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3595","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-3308","tags":["report"]},{"url":"https://xenbits.xen.org/xsa/advisory-360.html","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3308","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-3308","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","status":"published","published":"2021-01-26T19:58:23Z","modified":"2024-08-03T16:53:16.509Z","updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26642","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","status":"published","published":"2021-01-26T19:58:23Z","modified":"2024-08-03T16:53:16Z","updated_at":"2026-11-03T03:25:13.531128Z"}],"ghsa":[{"id":"GHSA-4gx5-7c23-79mh","title":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest...","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","status":"published","published":"2022-05-24T17:40:24Z","modified":"2023-01-29T05:05:31Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:45:48.864861Z"}],"nvd":[{"id":"CVE-2021-3308","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","status":"published","published":"2021-01-26T20:15:12.303Z","modified":"2026-06-17T04:04:54.85Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:49.660551Z"}],"osv":[{"id":"ALPINE-CVE-2021-3308","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","status":"published","published":"2021-01-26T20:15:12.303Z","modified":"2026-10-23T17:17:56.189812163Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"CVE-2021-3308","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","status":"published","published":"2021-01-26T20:15:12.303Z","modified":"2026-03-14T10:59:04.840537Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:19.793849Z"},{"id":"DEBIAN-CVE-2021-3308","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","status":"published","published":"2021-01-26T20:15:12.303Z","modified":"2026-10-23T18:03:59.387456371Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"UBUNTU-CVE-2021-3308","description":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.","status":"withdrawn","published":"2021-01-26T20:15:00Z","modified":"2025-07-16T07:42:45.931699Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"SUSE-SU-2021:1023-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 (bsc#1181254, XSA-360)\n- CVE-2021-28687: VUL-0: xen: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368)\n- CVE-2021-20257: VUL-0: xen: infinite loop issue in the e1000 NIC emulator (bsc#1182846)\n- CVE-2020-28368: VUL-0: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka (bsc#1178591, XSA-351)\n- L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut (bsc#1177204)\n- Kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)\n- OpenQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989)\n- Allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout\n  options via XENWATCHDOGD_ARGS= (bsc#1178736)\n- The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway.\n  This resulted to over-allocation (bsc#1177112)\n- The receiving side may punch holes incorrectly into optimistically allocated superpages.\n  Also reduce overhead in bitmap handling (bsc#1177112)\n- Upstream bug fixes (bsc#1027519)\n","status":"published","published":"2021-04-06T15:52:02Z","modified":"2026-02-04T03:34:57.843385Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:1028-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 (bsc#1181254, XSA-360)\n- CVE-2021-28687: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368)\n- L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut (bsc#1177204)\n- L3: XEN domU crashed on resume when using the xl unpause command (bsc#1182576)\n- L3: xen: no needsreboot flag set (bsc#1180690)\n- kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)\n- openQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989)\n- Upstream bug fixes (bsc#1027519)\n","status":"published","published":"2021-04-06T15:54:42Z","modified":"2026-02-04T03:39:18.513322Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:1460-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack (bsc#1178591, XSA-351) \n- CVE-2021-3308: IRQ vector leak on x86 (bsc#1181254, XSA-360)\n- CVE-2021-28687: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368) \n- L3: conring size for XEN HV's with huge memory to small (bsc#1177204).\n- kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)\n- openQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989).\n- Upstream bug fixes (bsc#1027519)\n","status":"published","published":"2021-04-30T11:33:12Z","modified":"2026-02-04T02:45:06.982076Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:2955-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).\n- CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376).\n- CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).\n- CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).\n- CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429)\n- CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434)\n- CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433)\n- CVE-2021-20255: Fixed stack overflow via infinite recursion in eepro100 (bsc#1182654)\n- CVE-2021-3592: slirp: invalid pointer initialization may lead to information disclosure (bootp)(bsc#1187369).\n- CVE-2021-3594: slirp: invalid pointer initialization may lead to information disclosure (udp)(bsc#1187378).\n- CVE-2021-3595: slirp: invalid pointer initialization may lead to information disclosure (tftp)(bsc#1187376).\n- CVE-2021-3308: Fixed IRQ vector leak on x86 (XSA-360)(bsc#1181254).\n\n- Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).\n","status":"published","published":"2021-09-03T12:45:10Z","modified":"2026-02-04T04:37:20.894835Z","updated_at":"2026-11-02T15:53:49.605187Z"}]}}