CVE-2020-27671: Debian Linux

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 31 only
• Opensuse Leap: version 15.1 only; version 15.2 only
• Xen Xen: from 4.2.0, up to and including 4.14.0

Published 2020-10-22. Last modified 2026-06-17.