The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-docUpgrade perfUpgrade kernel-headersUpgrade kernel-debug | Dec 1, 2016 | Mar 1, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 1, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Mar 1, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-32-genericUpgrade linux-image-3.2.0-39-virtualUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-3.2.0-1427-omap4Upgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-3.5.0-222-omap4Upgrade linux-image-3.5.0-27-highbankUpgrade linux-image-3.2.0-39-omapUpgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-3.5.0-27-genericUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-3.2.0-39-highbankUpgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.0.0-32-virtualUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-3.2.0-39-powerpc64-smpUpgrade linux-image-3.5.0-27-omapUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.0.0-1222-omap4Upgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-3.5.0-27-powerpc64-smpUpgrade linux-image-3.2.0-39-powerpc-smpUpgrade linux-image-3.2.0-39-genericUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.0.0-32-omapUpgrade linux-image-3.5.0-27-powerpc-smpUpgrade linux-image-3.2.0-39-generic-pae | Nov 8, 2024 | Mar 1, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub