The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade linux-grsecUpgrade qemuUpgrade linux-vanilla. | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade linux | Feb 2, 2016 | Jan 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/pvgrub. | Oct 30, 2017 | Apr 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-devel | Feb 2, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.2.0-97-omapUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.2.0-97-virtualUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.16.0-57-powerpc64-smp | Jan 4, 2016 | Dec 20, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub