Search the atlas

SUSE-SU-2021:2943-1 Not scored

Security update for xen

This update for xen fixes the following issues: - CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378). - CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429). - CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433). - CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380). - CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373). - CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376). - CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434). - Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).

Exploit probability Not scored

Published September 3, 2021

Required by Not available

Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Performance Computing 15-ESPOS xen

SUSE:Linux Enterprise High Performance Computing 15-LTSS xen

SUSE:Linux Enterprise Server for SAP Applications 15 xen

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2021-0089

related CVE-2021-28690

related CVE-2021-28692

related CVE-2021-28694

related CVE-2021-28695

related CVE-2021-28696

related CVE-2021-28697

related CVE-2021-28698

related CVE-2021-28699

upstream CVE-2021-0089

upstream CVE-2021-28690

upstream CVE-2021-28692

upstream CVE-2021-28694

upstream CVE-2021-28695

upstream CVE-2021-28696

upstream CVE-2021-28697

upstream CVE-2021-28698

upstream CVE-2021-28699

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:2943-1

This update for xen fixes the following issues: - CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378). - CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429). - CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433). - CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380). - CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373). - CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376). - CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434). - Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).

View original source

05 / REFERENCES

Further evidence