The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xen | Jul 30, 2024 | Aug 28, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Oct 30, 2017 | Aug 28, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 20, 2013 |
| Suse | — | Upgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade xen-kmp-bigsmpUpgrade xenUpgrade xen-xend-toolsUpgrade xen-doc-pdfUpgrade xen-libsUpgrade xen-tools-ioemuUpgrade xen-kmp-debugUpgrade xen-kmp-kdumpUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade xen-kmp-vmipaeUpgrade xen-doc-psUpgrade xen-kmp-desktopUpgrade xen-kmp-smpUpgrade xen-kmp-traceUpgrade xen-develUpgrade xen-kmp-kdumppaeUpgrade xen-toolsUpgrade xen-kmp-vmi | Feb 17, 2015 | Aug 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub