The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-vanilla.Upgrade linux-grsecUpgrade qemuUpgrade xen | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade linux | Feb 2, 2016 | Jan 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/pvgrub. | Oct 30, 2017 | Apr 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-docs | Feb 2, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.2.0-97-virtualUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.2.0-97-omapUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-3.16.0-57-powerpc64-smp | Jan 4, 2016 | Dec 20, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub