{"action":"Upgrade xen to 4.14.1-r2 or later.","affected":[{"fixed":"4.14.1-r2","introduced":"4.13.1"}],"component":"xen","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.23","exploited":false,"fixed_versions":["4.14.1-r2"],"id":"tcs_01M5ND87BHEX7FR2RN7AW7KCMH","modified_at":"2026-10-23T17:17:56.189812163Z","published_at":"2021-01-26T20:15:12.303Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2021-3308","https://security.alpinelinux.org/vuln/CVE-2021-3308"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2021-3308#Alpine:v3.23/xen","url":"https://osv.dev/vulnerability/ALPINE-CVE-2021-3308"}],"summary":"An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting it"}