The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernelUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-doc | Dec 1, 2016 | Feb 14, 2013 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Feb 14, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Feb 14, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 14, 2013 |
| Suse | — | Upgrade xen-libsUpgrade xen-libs-32bitUpgrade xen-kmp-pae-debuginfoUpgrade xen-kmp-paeUpgrade xen-tools-debuginfoUpgrade xen-doc-htmlUpgrade xen-libs-debuginfo-x86Upgrade xen-doc-pdfUpgrade xen-kmp-traceUpgrade xen-tools-domUUpgrade xen-libs-debuginfoUpgrade xen-kmp-defaultUpgrade sle-sdk-releaseUpgrade xen-kmp-desktop-debuginfoUpgrade xen-kmp-default-debuginfoUpgrade xenUpgrade xen-kmp-desktopUpgrade xen-tools-domU-debuginfoUpgrade xen-libs-x86Upgrade xen-develUpgrade xen-libs-debuginfo-32bitUpgrade xen-debugsourceUpgrade xen-tools | Dec 12, 2013 | Feb 14, 2013 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Feb 14, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub