CVE-2021-28700

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allow a domain to allocate memory beyond what an administrator originally configured.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

Vendor	Product	Versions
Xen	xen	4.12.x
Xen	xen	>= 4.13.x, < unspecified

References

Timeline

Published: Aug 27, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-287017.8Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such page CVE-2021-287027.6PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Res CVE-2021-287037.0grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of me CVE-2021-287048.8PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor CVE-2021-287057.8issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/v CVE-2021-287068.6guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercal CVE-2021-287078.8PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor CVE-2021-287088.8PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor CVE-2021-287097.8issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/v CVE-2021-287108.8certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may CVE-2021-287116.5Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains wh CVE-2021-287126.5Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains wh