CVE-2020-27671

—

CVSS 3.1

7.8 high

EPSS

<1%p27

Published

Oct 22, 2020 (Oct 22, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.

Vendors: xen opensuse debian fedoraproject
Products: xen, leap, debian linux, fedora
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.