Hypervisor using a microkernel design
xen:xen from the port| CVE-2026-23558 | 7.8 | 2026-05-19 | The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from … |
| CVE-2026-23554 | 7.8 | 2026-03-23 | The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dropped, so that multiple modifications done under the sam… |
| CVE-2023-34319 | 7.8 | 2023-09-22 | The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. … |
| CVE-2022-42332 | 7.8 | 2023-03-21 | x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen… |
| CVE-2022-23033 | 7.8 | 2022-01-25 | arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm (p2m_remove_mapping, guest_phy… |
| CVE-2021-28701 | 7.8 | 2021-09-08 | Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associat… |
| CVE-2025-58149 | 7.5 | 2025-10-31 | When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can sti… |
| CVE-2025-58148 | 7.5 | 2025-10-31 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Some Viridian hypercalls can specify a … |
| CVE-2025-58147 | 7.5 | 2025-10-31 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Some Viridian hypercalls can specify a … |
| CVE-2025-1713 | 7.5 | 2025-07-17 | When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acq… |
| CVE-2024-31145 | 7.5 | 2024-09-25 | Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges… |
| CVE-2024-31143 | 7.5 | 2024-07-18 | An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consec… |
| CVE-2024-45817 | 7.3 | 2024-09-25 | In x86's APIC (Advanced Programmable Interrupt Controller) architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an i… |
| CVE-2026-23555 | 7.1 | 2026-03-23 | Any guest issuing a Xenstore command accessing a node using the (illegal) node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstore… |
| CVE-2021-28692 | 7.1 | 2021-06-30 | inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) issuing such commands. In the cu… |
| CVE-2021-28703 | 7.0 | 2021-12-07 | grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory. The majority of such pa… |
| CVE-2026-23557 | 6.5 | 2026-05-19 | Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering. In case xenstored was built with NDEBUG… |
| CVE-2023-46842 | 6.5 | 2024-05-16 | Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hype… |
| CVE-2023-46841 | 6.5 | 2024-03-20 | Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET). A sub-feature of this are Shadow Stacks (CET-SS). CET-SS is a hardware feature desi… |
| CVE-2022-42319 | 6.5 | 2022-11-01 | Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of memory tem… |
| CVE-2018-5244 | 6.5 | 2018-01-05 | In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a v… |
| CVE-2022-33748 | 5.6 | 2022-10-11 | lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirem… |
| CVE-2024-45819 | 5.5 | 2024-12-19 | PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local memory, which are then copied into guest memory. … |
| CVE-2023-34327 | 5.5 | 2024-01-05 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions t… |
| CVE-2022-42326 | 5.5 | 2022-11-01 | Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabili… |
| CVE-2022-42325 | 5.5 | 2022-11-01 | Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabili… |
| CVE-2021-28699 | 5.5 | 2021-08-27 | inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a g… |
| CVE-2021-28698 | 5.5 | 2021-08-27 | long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants o… |
| CVE-2021-28700 | 4.9 | 2021-08-27 | xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the me… |
| CVE-2022-23035 | 4.6 | 2022-01-25 | Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in p… |
| CVE-2025-27465 | 4.3 | 2025-07-16 | Certain instructions need intercepting and emulating by Xen. In some cases Xen emulates the instruction by replaying it, using an executable stub. Some instructions ma… |
| CVE-2023-46840 | 4.1 | 2024-03-20 | Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen. |
| CVE-2026-23553 | 2.9 | 2026-01-28 | In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolatio… |
pkg audit reports nothing for this version.no CVE referenced
no CVE referenced
emulators/xen-kernel: fix wrong checksum
Fixes: 6961b47968af ("{emulators,sysutils}/xen-{kernel,tools}: update to 4.21")
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)d998c0e980{emulators,sysutils}/xen-{kernel,tools}: update to 4.21
Update to latest stable version. Fetch QEMU from the release tarball,
building from git is getting more and more complex, and we don't usually
have a delta of patches on top of QEMU that would dissaper if using git.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)6961b47968{emulators,sysutils}/xen-{kernel,tools}: update to 4.19.1.20250217
Update Xen packages, include QEMU fix to avoid using %ms scanf directive
which is not supported by FreeBSD libc.
Link: https://lore.kernel.org/xen-devel/20250107093140.86180-1-roger.pau@citrix.com/
Link: https://lists.freebsd.org/archives/freebsd-xen/2025-February/000227.html
Approved by: bapt (implicit)
Sponsored by: Cloud Software Group049a2dcbdb{emulators,sysutils}/xen-{kernel,tools}: update to 4.19.0
Sponsored by: Cloud Software Group
Approved by: bapt (implicit)566a18d032{emulators,sysutils}/xen-{kernel,tools}: update to 4.8.2
Changelog: https://xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=RELEASE-4.18.2
Sponsored by: Cloud Software Group
Approved by: bapt (implicit)80e73db7c8{sysutils,emulators}/xen-{tools,kernel}: update to latest stable hash
Update the kernel and tools packages and also include a fix for a clang code
generation bug.
Sponsored by: Cloud Software Group
Approved by: bapt (implicit)1094417894emulators/xen-kernel,sysutils/xen-tools: update to 4.18.0 See release notes: https://wiki.xenproject.org/wiki/Xen_Project_4.18_Release_Notes Approved by: bapt (implicit)0ad4440c97
{emulators,sysutils}/xen-{kernel,tools}: update to 4.17.2
Also take the opportunity to switch to fetching the sources from the GitHub
mirror based on commit hash. This makes it easier to update the port when
security fixes or relevant bugfixes are backported to the stable branches,
instead of manually having to cherry pick the changes and add them as patches.
Long term we should look into building emulators/qemu with Xen support so that
the xen-tools package doesn't need to carry its own version of QEMU.
Approved by: bapt (implicit)8b5aa5e081emulators/xen-kernel: add fix for fetching video mode Sponsored by: Citrix Systems R&D Approved by: bapt (implicit)7326a17b98
{emulators,sysutils}/xen-{kernel,tools}: update to 4.17
While there also update SeaBIOS to 1.16.1.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)3688ce5f84Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
{emulators,sysutils}/xen-{kernel,tools}: update to 4.16.0
Add fixes for XSA-{395,398} and backport clang retpoline support from
unstable.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)b717e68780emulators/xen-kernel: fix build with clang 13.0.0 Sponsored by: Citrix Systems R&D Approved by: bapt (implicit)96cede86ff
cleanup: drop support for EOL FreeBSD 11.X Search criteria used: - 11.4 - OSREL* - OSVER* - *_FreeBSD_11 Input from: - adridg: devel/qca-legacy - jbeich: _WITH_DPRINTF, _WITH_GETLINE, GNU bfd workarounds - sunpoet: security/p5-*OpenSSL* Reviewed by: doceng, kde, multimedia, perl, python, ruby, rust Differential Revision: https://reviews.freebsd.org/D32008 Test Plan: make index620968a43a
emulators/xen-kernel: import fix for cache attributes Import fixes for cache attributes of grant and foreign maps on Intel. This should result in an I/O performance improvement when using FreeBSD as a dom0 on Intel hardware. Approved by: bapt (implicit)fa0f04a80f
emulators/xen-kernel: remove stale patch files Those patches are already part of Xen 4.15 and not used by the build. Approved by: bapt (implicit)d0e59dedfb
{emulators,sysutils}/xen-{kernel,tools}: update to 4.15.0
Also add support for using UEFI firmware in guests.
Sponsored by: Citrix Systems R&D
Approved by: bapt (implicit)5e92a126a9One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
emulators/xen-kernel: fix EFI calling convention Xen builds using clang where not using the correct calling convention for EFI services, backport an upstream patch to fix it. Approved by: bapt (implicit)80a96d377f
emulators/xen-kernel,sysutils/xen-tools: update to 4.14.1 Sponsored by: Citrix Systems R&D Approved by: bapt (implicit)835ba0b256
emulators/xen-kernel & sysutils/xen-tools: update to 4.14.0 Update to latest version and include a build fix for LLVM 11. Approved by: bapt (implicit)4e2c592597
sysutils/xen-tools + emulators/xen-kernel: update to 4.13.1 Sponsored by: Citrix Systems R&D Approved by: bapt (implicit)1e578cd564
emulators/xen-kernel: improve package message Use onifconsole for the Xen console, so that when booting bare metal there are no annoying messages about a console being off. Also note the usage of vm.max_user_wired instead of vm.max_wired on FreeBSD > 13. Finally expand a little bit on how to get a working serial and VGA consoles simultaneously. Sponsored by: Citrix Systems R&D Approved by: bapt (implicit)6dff577bd6
xen-{kernel/tools}: update to 4.13
Sponsored by: Citrix Systems R&D
Approved by: bapt
Differential revision: https://reviews.freebsd.org/D23170a6b94a0696Convert to UCL & cleanup pkg-message (categories e-g)79698c8457
xen-{tools/kernel}: update to 4.12.1
Sponsored by: Citrix Systems R&D
Approved by: mat
Differential revision: https://reviews.freebsd.org/D212270d306f24e0emulators/xen-kernel: fix foreign mappings Backport upstream patch to fix foreign mappings. Sponsored by: Citrix Systems R&D Approved by: ports (tobik) Differential revision: https://reviews.freebsd.org/D210283a144d9694
xen-{kernel/tools}: switch back to LLVM toolchain
Backport upstream fixes to correctly build Xen using LLVM 8
toolchain.
Note the fixes are not strictly needed for xen-tools since the Xen
shim build is only ever supposed to be booted using the PVH entry
point (and not the multiboot entry points). Yet given LLD8 erratic
behaviour with orphan section placement I think it's best to ensure
proper section placement for the shim also.
Sponsored by: Citrix Systems R&D
Reviewed by: mat
Differential revision: https://reviews.freebsd.org/D208162213382ec7emulators/xen-kernel: use binutils to workaround LLD 8 bug LLD 8 changed the behaviour regarding the placement of orphaned sections, which produces a non-bootable Xen kernel: https://bugs.llvm.org/show_bug.cgi?id=42327 Switch to GNU LD (and NM) until this is resolved. Sponsored by: Citrix Systems R&D Reviewed by: mat Differential revision: https://reviews.freebsd.org/D2070643b9be10c5
xen: add fixes for XSA-297 (MDS) Sponsored by: Citrix Systems R&D Reviewed by: mat Differential revision: https://reviews.freebsd.org/D20265228d3e5670
xen: update to 4.12 Reviewed by: bapt Sponsored by: Citrix Systems R&D Differential revision: https://reviews.freebsd.org/D200387931facd63
emulators/xen-kernel: backport fixes and apply XSAs
Backport a couple of fixes critical for PVH dom0 and
fixes for XSA-{284,287,290,292-294}.
Sponsored-by: Citrix Systems R&D
Reviewed by: bapt
Differential revision: https://reviews.freebsd.org/D19413803787f39fxen-kernel & xen-tools: fix ignore message To mention 12.0 or any newer release, instead of just mentioning HEAD. Sponsored by: Citrix Systems R&D Reviewed by: bapt Differential revision: https://reviews.freebsd.org/D1938748c035bae6
emulators/xen-kernel & sysutils/xen-tools: update to 4.11.1 Sponsored by: Citrix Systems R&D Reviewed by: bapt Differential revision: https://reviews.freebsd.org/D192934cfcdeaeb3
emulators/xen-kernel411 & sysutils/xen-tools411: drop version number from port Actually perform the rename of the directories missing in r494039. Sponsored by: Citrix Systems R&D Reviewed by: bapt Differential revision: https://reviews.freebsd.org/D192843b0d6a32bd
xen: rename to xen47 Preparatory change in order to import a newer Xen version while keeping the previous one. Reviewed by: bapt Sponsored by: Citrix Systems R&D Differential Revision: https://reviews.freebsd.org/D16416768717cce7
xen-kernel: add prerequisites for XSA-254 bandaid MFH with: r459787 MFH: 2018Q1e9233956dd
xen-kernel: fix build with clang 6 and apply pending XSA patches This includes a band-aid for running 64bit PV guests without compromising the whole system. Commit the makefile diff left behind in r459786. MFH: 2018Q1 Sponsored by: Citrix Systems R&D0cf5fe5c18
xen-kernel: fix build with clang 6 and apply pending XSA patches This includes a band-aid for running 64bit PV guests without compromising the whole system. MFH: 2018Q1 Sponsored by: Citrix Systems R&D989d8dbb27
- Those ports fail to build with python3 - Add some explicit FLAVOR to dependencies where neededa021c1b8c0
xen: apply XSA-236 Approved by: bapt (implicit) MFH: 2017Q4 Sponsored by: Citrix Systems R&D26386f00eb
xen-kernel: apply XSA-{237..244}
Approved by: bapt (implicit)
MFH: 2017Q4
Sponsored by: Citrix Systems R&Daac1e9a2f0xen: apply XSA-{231-234}
MFH: 2017Q3
Approved by: bapt
Sponsored by: Citrix Systems R&Dbefbaafd49xen-kernel: apply XSA-{226,227,228,230}
This is CVE-2017-12135, CVE-2017-12137, CVE-2017-12136 and
CVE-2017-12855.
MFH: 2017Q3
Approved by: lwshu
Sponsored by: Citrix Systems R&D7a08b0d624xen: apply XSA-{217,218,219,220,221,222,224}
Approved by: bapt
Sponsored by: Citrix Systems R&D
MFH: 2017Q250c059acb6xen: XSA-{213,214,215}
Apply XSA-213, XSA-214 and XSA-215.
MFH: 2017Q2
Approved by: bapt
Sponsored by: Citrix Systems R&D0e78990b85xen: apply XSA-212 And do some portlint fixing (thanks to Li-Wen Hsu). Approved by: lwshu Sponsored by: Citrix Systems R&D MFH: 2017Q1a8aaff068f
xen: update to 4.7.2 Apply build fixes for clang 4.0 (picked from upstream) and XSA-211. Reviewed by: bapt MFH: 2017Q1 Sponsored by: AsiaBSDCon Differential revision: https://reviews.freebsd.org/D99266a777074d5