Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-vanilla.Upgrade xenUpgrade linux-grsecUpgrade qemu | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade qemuUpgrade linuxUpgrade xen | Mar 17, 2016 | Mar 17, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-docsUpgrade xen-develUpgrade xen-tools-domuUpgrade xen-toolsUpgrade xenUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade kernel-obs-buildUpgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade xen-kmp-traceUpgrade xen-kmp-defaultUpgrade xen-libs | Feb 3, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.2.0-1476-omap4Upgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-4.2.0-22-lowlatencyUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade qemu-system-miscUpgrade linux-image-3.2.0-97-generic-paeUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.2.0-97-omapUpgrade qemu-systemUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.2.0-97-virtualUpgrade qemu-system-armUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade qemu-kvmUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-3.13.0-74-lowlatency | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub