Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade xenUpgrade linux-grsecUpgrade linux-vanilla. | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade xenUpgrade qemuUpgrade linux | Mar 17, 2016 | Mar 17, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen. | Oct 30, 2017 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade xen-doc-pdfUpgrade xen-libs-32bitUpgrade kernel-obs-buildUpgrade xen-kmp-paeUpgrade xen-kmp-traceUpgrade xen-libsUpgrade kernel-defaultUpgrade kernel-docsUpgrade xenUpgrade kernel-ec2-extraUpgrade xen-develUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade xen-tools-domuUpgrade xen-tools-xendomains-wait-diskUpgrade xen-tools | Feb 3, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-74-powerpc-smpUpgrade qemu-kvmUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade qemu-system-armUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.2.0-97-virtualUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.2.0-97-highbankUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade qemu-system-mipsUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.2.0-1476-omap4Upgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-4.2.0-22-lowlatencyUpgrade qemu-system-x86Upgrade linux-image-3.2.0-97-omapUpgrade qemu-systemUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.19.0-42-generic-lpae | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub