CVE-2021-28700 PUBLISHED

xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allow a domain to allocate memory beyond what an administrator originally configured.

EPSS 2.13% · 84.0th percentile

Risk Scores

EPSS Score
2.13%
84.0th percentile

Affected Products

VendorProductVersions
Ubuntu:25.10xen4.20.0+68-g35cb38b222-1, 4.20.0-1ubuntu1, 0
Ubuntu:24.04:LTSxen4.17.2+76-ge1f9cb16e2-1, 4.17.2+76-ge1f9cb16e2-1ubuntu1, 4.17.3+10-g091466ba55-1
Ubuntu:20.04:LTSxen4.9.2-0ubuntu6, 4.9.2-0ubuntu7, 4.11.3+24-g14b62ab3e5-1ubuntu1
Ubuntu:22.04:LTSxen4.16.0-1~ubuntu2, 4.16.0-1~ubuntu2.1, 0
Ubuntu:18.04:LTSxen4.9.0-0ubuntu4, 4.9.2-0ubuntu1, 0
Ubuntu:16.04:LTSxen0, 4.6.0-1ubuntu2, 4.6.0-1ubuntu4

Timeline

References

Open in Interactive Console →