All vulnerabilities

Servers and applications

CVE-2021-28708

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-demand (PoD) mode, to provide a way for them to later easily have more memory assigned. Guests are permitted to control certain P2M aspects of individual pages via hypercalls. These…

Severity
High 8.8
Published
24 Nov 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • From 4.7.0 up to 4.15.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-28708
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-28708