CVE-2021-27379

An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service (host OS crash) or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct. NOTE: this issue exists because of an incomplete fix for CVE-2020-15565.

• http://www.openwall.com/lists/oss-security/2021/02/23/1Mailing List, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-366.htmlMitigation, Patch, Vendor Advisory
• https://www.debian.org/security/2021/dsa-4888Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-366.htmlPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2021/02/23/1Mailing List, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-366.htmlMitigation, Patch, Vendor Advisory
• https://www.debian.org/security/2021/dsa-4888Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-366.htmlPatch, Vendor Advisory

Published

Feb 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27372Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext …9.8
• CVE-2021-27374VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP…7.5
• CVE-2021-27375Traefik before 2.4.5 allows the loading of IFRAME elements f…5.3
• CVE-2021-27376An issue was discovered in the nb-connect crate before 1.0.3…9.8
• CVE-2021-27377An issue was discovered in the yottadb crate before 1.2.0 fo…9.8
• CVE-2021-27378An issue was discovered in the rand_core crate before 0.6.2 …9.8
• CVE-2021-27380A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2021-27381A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2021-27382A vulnerability has been identified in Solid Edge SE2020 (Al…7.8
• CVE-2021-27383A vulnerability has been identified in SIMATIC HMI Comfort O…7.5
• CVE-2021-27384A vulnerability has been identified in SIMATIC HMI Comfort O…9.8
• CVE-2021-27385A vulnerability has been identified in SIMATIC HMI Comfort O…7.5