Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-28693

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary area before they are copied by Xen to each domain memory. To

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
XEN

Description

xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary area before they are copied by Xen to each domain memory. To ensure sensitive data is not leaked from the modules, Xen must "scrub" them before handing the page over to the allocator. Unfortunately, it was discovered that modules will not be scrubbed on Arm.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xen xen

  • 4.15.xaffected

Xen xen

  • unspecified to < 4.12unknown
  • 4.13.x to < unspecifiedaffected
  • next of 4.14.x to < unspecifiedunaffected

Xen xen

  • xen-unstableaffected

Xen xen

  • 4.12.xaffected

References