The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsecUpgrade xenUpgrade linux-vanilla.Upgrade qemu | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade linux | Feb 2, 2016 | Jan 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Apr 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2 | Feb 2, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.2.0-97-virtualUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.2.0-97-omap | Jan 4, 2016 | Dec 20, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub