Vulnetix
Try Vulnetix Request Demo
CVE-2021-28693 PUBLISHED

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary area before they are copied by Xen to each domain memory. To ensure sensitive data is not leaked from the modules, Xen must "scrub" them before handing the page over to the allocator. Unfortunately, it was discovered that modules will not be scrubbed on Arm.

EPSS 0.06% · 18.7th percentile

Risk Scores

EPSS Score
0.06%
18.7th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSxen0, 4.9.2-0ubuntu1, 4.9.0-0ubuntu4
Ubuntu:25.10xen0, 4.20.0+68-g35cb38b222-1, 4.20.0-1ubuntu1
Ubuntu:22.04:LTSxen4.11.4+24-gddaaccbbab-1ubuntu2, 4.16.0-1~ubuntu2, 4.16.0-1~ubuntu2.1
Ubuntu:24.04:LTSxen4.17.2-1, 4.17.2+55-g0b56bed864-1, 4.17.2+76-ge1f9cb16e2-1ubuntu1
Ubuntu:16.04:LTSxen0, 4.5.1-0ubuntu1, 4.5.1-0ubuntu2
Ubuntu:20.04:LTSxen4.11.3+24-g14b62ab3e5-1ubuntu2.3, 4.11.3+24-g14b62ab3e5-1ubuntu2.2, 4.11.3+24-g14b62ab3e5-1ubuntu2

Timeline

References

Open in Interactive Console →