What’s Vulnerable › Vulnerabilities

CVE-2021-28690

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-06-29 · updated 2026-06-17

Description

x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX (the default and preferred option) requires selecting a non-default setting in MSR_TSX_CTRL. This setting isn't restored after S3 suspend.

Affected products

• xen: from 4.12 through 4.15.0; 4.15.0-rc1

References

• https://security.gentoo.org/glsa/202107-30
• https://xenbits.xenproject.org/xsa/advisory-377.txt
• https://security.gentoo.org/glsa/202107-30
• https://xenbits.xenproject.org/xsa/advisory-377.txt

Get alerted when CVE-2021-28690 or the next vulnerability affects your stack