The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks."
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsecUpgrade qemuUpgrade xenUpgrade linux-vanilla. | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade linux | Feb 2, 2016 | Jan 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/pvgrub. | Oct 30, 2017 | Apr 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extra | Feb 2, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc64-embUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.2.0-97-virtualUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-3.16.0-57-powerpc64-smpUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-3.2.0-97-omapUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-3.13.0-74-lowlatency | Jan 4, 2016 | Dec 20, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub