CVE-2021-28690

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX (the default and preferred option) requires selecting a non-default setting in MSR_TSX_CTRL. This setting isn't restored after S3 suspend.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
Xen	xen	>= 4.13.x, < unspecified
Xen	xen	4.12.x
Xen	xen	4.11.x

References

https://security.gentoo.org/glsa/202107-30Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-377.txtPatch, Vendor Advisory
https://security.gentoo.org/glsa/202107-30Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-377.txtPatch, Vendor Advisory

Timeline

Published: Jun 29, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-286917.8Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interfac CVE-2021-286927.1inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) iss CVE-2021-286935.5xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary area before they are CVE-2021-286946.8IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr CVE-2021-286956.8IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr CVE-2021-286966.8IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities corr CVE-2021-286977.8grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The m CVE-2021-286985.5long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a doma CVE-2021-286995.5inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, whe CVE-2021-287004.9xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly fr CVE-2021-287017.8Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such page CVE-2021-287027.6PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Res