The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of service (host OS BUG_ON) via a crafted memory access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xen | Jul 30, 2024 | Jan 25, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 25, 2011 |
| Suse | — | Upgrade xen-kmp-debugUpgrade xen-tools-domUUpgrade virt-managerUpgrade xen-doc-htmlUpgrade xen-kmp-kdumpUpgrade xen-kmp-defaultUpgrade vm-installUpgrade sap-aio-releaseUpgrade xenUpgrade xen-kmp-vmipaeUpgrade xen-kmp-desktopUpgrade xen-libsUpgrade xen-kmp-paeUpgrade xen-doc-psUpgrade xen-libs-32bitUpgrade xen-kmp-kdumppaeUpgrade xen-tools-ioemuUpgrade xen-kmp-vmiUpgrade xen-kmp-smpUpgrade xen-toolsUpgrade xen-develUpgrade xen-doc-pdfUpgrade xen-kmp-bigsmp | Dec 12, 2013 | Jan 24, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Jan 24, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub