The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-PAEUpgrade kernel-PAE-devel | Dec 1, 2016 | May 22, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 22, 2009 |
| Suse | — | Upgrade um-host-install-initrdUpgrade kernel-xenpaeUpgrade kernel-sn2Upgrade kernel-smpUpgrade kernel-kdumpUpgrade kernel-64k-pagesizeUpgrade kernel-s390-debugUpgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-umUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-bigsmpUpgrade um-host-kernelUpgrade kernel-s390xUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-s390x-debugUpgrade kernel-pseries64 | Feb 17, 2015 | May 22, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub