Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsecUpgrade linux-vanilla.Upgrade xenUpgrade qemu | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade qemuUpgrade linuxUpgrade xen | Mar 17, 2016 | Mar 17, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen. | Oct 30, 2017 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade xenUpgrade kernel-docsUpgrade xen-develUpgrade kernel-ec2-extraUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-ec2-develUpgrade xen-toolsUpgrade kernel-ec2Upgrade xen-kmp-paeUpgrade xen-kmp-traceUpgrade xen-libs-32bitUpgrade kernel-obs-buildUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade xen-doc-pdfUpgrade xen-kmp-defaultUpgrade xen-libsUpgrade kernel-default | Feb 3, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade qemu-systemUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-3.2.0-1476-omap4Upgrade linux-image-3.19.0-42-generic-lpaeUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade qemu-system-x86Upgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.2.0-97-omapUpgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade qemu-system-mipsUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade qemu-kvmUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.16.0-57-lowlatencyUpgrade qemu-system-armUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.2.0-97-virtual | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub