The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application. NOTE: because this issue is due to incorrect use of the Intel specification, it should have been split into separate identifiers; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Jun 12, 2012 |
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-doc | Dec 1, 2016 | Jun 12, 2012 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Jun 12, 2012 |
| Freebsd | — | Upgrade FreeBSD | Dec 10, 2025 | Jun 27, 2012 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen. | Oct 30, 2017 | Jun 12, 2012 |
| Oracle Solaris | — | Upgrade system/kernel to version 0.5.11-0.175.0.10.0.5.1 on Solaris 11.0Upgrade system/kernel/platform to version 0.5.11-0.175.0.10.0.5.1 on Solaris 11.0 | May 29, 2017 | Jun 12, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 12, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 12, 2012 |
| Suse | — | Upgrade libvirtUpgrade virt-managerUpgrade vm-installUpgrade libvirt-pythonUpgrade xen-libsUpgrade yast2-vmUpgrade libvirt-docUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade xen-doc-pdfUpgrade xen-toolsUpgrade xen-develUpgrade virt-utilsUpgrade xen-tools-domUUpgrade libvirt-devel-32bitUpgrade libvirt-develUpgrade xen-kmp-traceUpgrade libvirt-client-32bitUpgrade xenUpgrade xen-kmp-defaultUpgrade xen-kmp-paeUpgrade libvirt-client | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xenUpgrade xen-3.2 | Nov 19, 2024 | Jun 12, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub