The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsecUpgrade xenUpgrade qemuUpgrade linux-vanilla. | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade linux | Feb 2, 2016 | Jan 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Apr 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-ec2-devel | Feb 2, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.2.0-97-omapUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.2.0-97-virtualUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.16.0-57-lowlatency | Jan 4, 2016 | Dec 20, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub