Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsecUpgrade xenUpgrade linux-vanilla.Upgrade qemu | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade xenUpgrade linuxUpgrade qemu | Mar 17, 2016 | Mar 17, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/pvgrub. | Oct 30, 2017 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade xen-develUpgrade xenUpgrade kernel-docsUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-ec2-develUpgrade xen-tools-domuUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade xen-kmp-traceUpgrade kernel-obs-buildUpgrade xen-libs-32bitUpgrade kernel-defaultUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade xen-doc-pdfUpgrade xen-libs | Feb 3, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade qemu-system-armUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade qemu-kvmUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.2.0-97-virtualUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade linux-image-3.16.0-57-powerpc64-embUpgrade qemu-system-mipsUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade qemu-system-ppcUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.2.0-1476-omap4Upgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade qemu-systemUpgrade linux-image-3.2.0-97-omapUpgrade linux-image-3.2.0-97-highbank | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub