5.5
CVSSv3

CVE-2021-28693

Published: 30/06/2021 Updated: 21/09/2021
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary area before they are copied by Xen to each domain memory. To ensure sensitive data is not leaked from the modules, Xen must "scrub" them before handing the page over to the allocator. Unfortunately, it exists that modules will not be scrubbed on Arm.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

xen xen

xen xen 4.15.0