The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade linux-vanilla.Upgrade linux-grsecUpgrade xen | Aug 30, 2017 | Dec 17, 2015 |
| Debian | — | Upgrade linux | Feb 2, 2016 | Jan 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen. | Oct 30, 2017 | Apr 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2015 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extra | Feb 2, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-4.2.0-22-lowlatencyUpgrade linux-image-3.2.0-97-highbankUpgrade linux-image-3.16.0-57-generic-lpaeUpgrade linux-image-3.2.0-97-genericUpgrade linux-image-3.16.0-57-powerpc-e500mcUpgrade linux-image-3.16.0-57-lowlatencyUpgrade linux-image-4.2.0-22-powerpc64-smpUpgrade linux-image-4.2.0-22-powerpc-smpUpgrade linux-image-3.13.0-74-generic-lpaeUpgrade linux-image-3.13.0-74-genericUpgrade linux-image-3.19.0-42-genericUpgrade linux-image-3.2.0-97-powerpc64-smpUpgrade linux-image-3.16.0-57-genericUpgrade linux-image-3.2.0-97-virtualUpgrade linux-image-3.13.0-74-powerpc-smpUpgrade linux-image-3.2.0-97-powerpc-smpUpgrade linux-image-4.2.0-22-powerpc-e500mcUpgrade linux-image-3.19.0-42-generic-lpaeUpgrade linux-image-4.2.0-22-powerpc64-embUpgrade linux-image-3.13.0-74-powerpc-e500Upgrade linux-image-4.2.0-22-generic-lpaeUpgrade linux-image-3.2.0-97-generic-paeUpgrade linux-image-3.16.0-57-powerpc-smpUpgrade linux-image-3.19.0-42-powerpc64-smpUpgrade linux-image-3.16.0-57-powerpc64-embUpgrade linux-image-3.13.0-74-powerpc-e500mcUpgrade linux-image-3.2.0-97-omapUpgrade linux-image-3.13.0-74-powerpc64-smpUpgrade linux-image-3.19.0-42-lowlatencyUpgrade linux-image-3.16.0-57-powerpc64-smpUpgrade linux-image-3.19.0-42-powerpc64-embUpgrade linux-image-3.19.0-42-powerpc-smpUpgrade linux-image-4.2.0-22-genericUpgrade linux-image-3.13.0-74-lowlatencyUpgrade linux-image-3.19.0-42-powerpc-e500mcUpgrade linux-image-3.13.0-74-powerpc64-emb | Jan 4, 2016 | Dec 20, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub