CVE-2021-28706

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may overflow. It would then only be the overflowed (and hence small) number which gets compared against the established upper bound.

• CWE-770

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7ZGWVVRI4XY2XSTBI3XEMWBXPDVX6OT/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PXUI4VMD52CH3T7YXAG3J2JW7ZNN3SXF/
• https://security.gentoo.org/glsa/202402-07
• https://www.debian.org/security/2021/dsa-5017Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-385.txtMitigation, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7ZGWVVRI4XY2XSTBI3XEMWBXPDVX6OT/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PXUI4VMD52CH3T7YXAG3J2JW7ZNN3SXF/
• https://security.gentoo.org/glsa/202402-07
• https://www.debian.org/security/2021/dsa-5017Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-385.txtMitigation, Patch, Third Party Advisory

Published

Nov 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-28700xen/arm: No memory limit for dom0less domUs The dom0less fea…4.9
• CVE-2021-28701Another race in XENMAPSPACE_grant_table handling Guests are …7.8
• CVE-2021-28702PCI devices with RMRRs not deassigned correctly Certain PCI …7.6
• CVE-2021-28703grant table v2 status pages may remain accessible after de-a…7
• CVE-2021-28704PoD operations on misaligned GFNs T[his CNA information reco…8.8
• CVE-2021-28705issues with partially successful P2M updates on x86 T[his CN…7.8
• CVE-2021-28707PoD operations on misaligned GFNs T[his CNA information reco…8.8
• CVE-2021-28708PoD operations on misaligned GFNs T[his CNA information reco…8.8
• CVE-2021-28709issues with partially successful P2M updates on x86 T[his CN…7.8
• CVE-2021-28710certain VT-d IOMMUs may not work in shared page table mode F…8.8
• CVE-2021-28711Rogue backends can cause DoS of guests via high frequency ev…6.5
• CVE-2021-28712Rogue backends can cause DoS of guests via high frequency ev…6.5