Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | Aug 12, 2011 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Aug 12, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Aug 12, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 13, 2011 |
| Suse | — | Upgrade xen-libs-32bitUpgrade xenUpgrade xen-develUpgrade xen-doc-pdfUpgrade xen-libsUpgrade xen-toolsUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade xen-kmp-pae | Feb 17, 2015 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub