arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Oct 30, 2017 | Aug 24, 2017 |
| Debian | — | Upgrade xen | Sep 13, 2017 | Aug 24, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen. | Jan 15, 2018 | Aug 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 15, 2017 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade xen-toolsUpgrade xenUpgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-tools-xendomains-wait-diskUpgrade xen-tools-domuUpgrade xen-devel | Sep 1, 2017 | Aug 24, 2017 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Aug 24, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub