Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade linux-vanilla.Upgrade linux-grsecUpgrade qemu | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade xenUpgrade qemuUpgrade linux | Mar 17, 2016 | Mar 17, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools.Upgrade app-emulation/pvgrub. | Oct 30, 2017 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade xen-develUpgrade xen-toolsUpgrade xen-tools-xendomains-wait-diskUpgrade xenUpgrade xen-doc-pdfUpgrade xen-kmp-traceUpgrade xen-kmp-paeUpgrade xen-doc-htmlUpgrade kernel-defaultUpgrade xen-libs-32bitUpgrade kernel-obs-buildUpgrade xen-tools-domUUpgrade xen-libsUpgrade xen-kmp-default | Feb 3, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-74-powerpc-smpUpgrade qemu-kvmUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-3.16.0-57-genericUpgrade qemu-system-armUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.2.0-97-virtualUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade qemu-system-x86Upgrade linux-image-3.19.0-42-lowlatencyUpgrade qemu-system-ppcUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade qemu-system-miscUpgrade linux-image-4.2.0-22-lowlatencyUpgrade qemu-system-aarch64Upgrade linux-image-3.2.0-1476-omap4Upgrade qemu-system-mipsUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade linux-image-3.2.0-97-omapUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-3.2.0-97-powerpc64-smp | Feb 3, 2016 | Feb 3, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub