Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 12, 2015 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Mar 12, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 10, 2015 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-docs | Dec 18, 2015 | Mar 12, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-53-powerpc64-smpUpgrade linux-image-3.13.0-53-powerpc-e500Upgrade linux-image-3.2.0-85-highbankUpgrade linux-image-3.2.0-85-generic-paeUpgrade linux-image-3.16.0-36-powerpc64-embUpgrade linux-image-3.13.0-53-powerpc-smpUpgrade linux-image-3.2.0-85-omapUpgrade linux-image-3.2.0-85-powerpc64-smpUpgrade linux-image-3.13.0-53-powerpc-e500mcUpgrade linux-image-3.16.0-36-lowlatencyUpgrade linux-image-3.16.0-36-genericUpgrade linux-image-3.16.0-36-powerpc-e500mcUpgrade linux-image-3.2.0-1465-omap4Upgrade linux-image-3.16.0-36-powerpc64-smpUpgrade linux-image-3.13.0-53-powerpc64-embUpgrade linux-image-3.13.0-53-genericUpgrade linux-image-3.13.0-53-lowlatencyUpgrade linux-image-3.16.0-36-powerpc-smpUpgrade linux-image-3.16.0-36-generic-lpaeUpgrade linux-image-3.2.0-85-powerpc-smpUpgrade linux-image-3.2.0-85-virtualUpgrade linux-image-3.2.0-85-genericUpgrade linux-image-3.13.0-53-generic-lpae | Nov 8, 2024 | Mar 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub