The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of service (host OS BUG_ON) via a crafted memory access.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xen | Jul 30, 2024 | Jan 25, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 25, 2011 |
| Suse | — | Upgrade virt-managerUpgrade vm-installUpgrade xen-kmp-kdumpUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade xenUpgrade sap-aio-releaseUpgrade xen-kmp-debugUpgrade xen-kmp-smpUpgrade xen-toolsUpgrade xen-kmp-kdumppaeUpgrade xen-libs-32bitUpgrade xen-libsUpgrade xen-kmp-paeUpgrade xen-develUpgrade xen-kmp-vmiUpgrade xen-doc-pdfUpgrade xen-doc-psUpgrade xen-kmp-bigsmpUpgrade xen-tools-ioemuUpgrade xen-kmp-desktopUpgrade xen-kmp-vmipae | Dec 12, 2013 | Jan 24, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Jan 24, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub