Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-27671

Fixed in a distro release EPSS <1%

An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.

Published 2020-10-22 · CVE record · OSV

Products: xen, opensuse leap, debian_linux, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Alpine 3.10xen4.12.4-r0
Alpine 3.11xen4.13.2-r0
Alpine 3.12xen4.13.2-r0
Alpine 3.13xen4.14.0-r2
Alpine 3.14xen4.14.0-r2
Alpine 3.15xen4.14.0-r2
Alpine 3.16xen4.14.0-r2
Alpine 3.17xen4.14.0-r2
Alpine 3.18xen4.14.0-r2
Alpine 3.19xen4.14.0-r2
Alpine 3.20xen4.14.0-r2
Alpine 3.21xen4.14.0-r2
Alpine 3.22xen4.14.0-r2
Alpine 3.23xen4.14.0-r2
Alpine 3.24xen4.14.0-r2
Debian 10xen4.11.4+57-g41a822c392-1
Debian 12xen4.14.0+80-gd101b417b7-1
Debian 13xen4.14.0+80-gd101b417b7-1
Debian 14xen4.14.0+80-gd101b417b7-1
SUSE Enterprise Storage 5xen4.9.4_14-3.77.1
SUSE HPE Helion OpenStack 8xen4.9.4_14-3.77.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSxen4.10.4_22-3.50.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSxen4.10.4_18-3.44.1
SUSE Linux Enterprise High Performance Computing 15-LTSSxen4.10.4_18-3.44.1
SUSE Linux Enterprise High Performance Computing 15-LTSSxen4.10.4_22-3.50.1
SUSE Linux Enterprise Module for Basesystem 15 SP1xen4.12.4_04-3.37.1
SUSE Linux Enterprise Module for Basesystem 15 SP1xen4.12.3_10-3.31.1
SUSE Linux Enterprise Module for Basesystem 15 SP2xen4.13.1_10-3.13.1
SUSE Linux Enterprise Module for Basesystem 15 SP2xen4.13.2_04-3.19.1
SUSE Linux Enterprise Module for Server Applications 15 SP1xen4.12.3_10-3.31.1
SUSE Linux Enterprise Module for Server Applications 15 SP1xen4.12.4_04-3.37.1
SUSE Linux Enterprise Module for Server Applications 15 SP2xen4.13.1_10-3.13.1
SUSE Linux Enterprise Module for Server Applications 15 SP2xen4.13.2_04-3.19.1
SUSE Linux Enterprise Server 11 SP4-LTSSxen4.4.4_46-61.58.1
SUSE Linux Enterprise Server 12 SP2-BCLxen4.7.6_12-43.70.1
SUSE Linux Enterprise Server 12 SP2-LTSSxen4.7.6_12-43.70.1
SUSE Linux Enterprise Server 12 SP3-BCLxen4.9.4_14-3.77.1
SUSE Linux Enterprise Server 12 SP3-LTSSxen4.9.4_14-3.77.1
SUSE Linux Enterprise Server 12 SP4-LTSSxen4.11.4_14-2.45.1
SUSE Linux Enterprise Server 12 SP4-LTSSxen4.11.4_10-2.39.2
SUSE Linux Enterprise Server 12 SP5xen4.12.3_10-3.27.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2xen4.7.6_12-43.70.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3xen4.9.4_14-3.77.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4xen4.11.4_14-2.45.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4xen4.11.4_10-2.39.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5xen4.12.3_10-3.27.1
SUSE Linux Enterprise Server for SAP Applications 15xen4.10.4_18-3.44.1
SUSE Linux Enterprise Server for SAP Applications 15xen4.10.4_22-3.50.1
SUSE Linux Enterprise Software Development Kit 12 SP5xen4.12.3_10-3.27.1
SUSE OpenStack Cloud 7xen4.7.6_12-43.70.1
SUSE OpenStack Cloud 8xen4.9.4_14-3.77.1
SUSE OpenStack Cloud 9xen4.11.4_14-2.45.1
SUSE OpenStack Cloud 9xen4.11.4_10-2.39.2
SUSE OpenStack Cloud Crowbar 8xen4.9.4_14-3.77.1
SUSE OpenStack Cloud Crowbar 9xen4.11.4_14-2.45.1
SUSE OpenStack Cloud Crowbar 9xen4.11.4_10-2.39.2
Ubuntu 16.04 LTSxenno fix
Ubuntu 18.04 LTSxenno fix
Ubuntu 20.04 LTSxenno fix
openSUSE Leap 15.1xen4.12.3_10-lp151.2.27.1
openSUSE Leap 15.1xen4.12.4_04-lp151.2.33.1
openSUSE Leap 15.2xen4.13.2_04-lp152.2.18.1
openSUSE Leap 15.2xen4.13.1_10-lp152.2.12.1
openSUSE Tumbleweedxen4.15.1_01-1.2