vulnerability

Debian: CVE-2016-7777: xen -- security update

Severity
3
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:N)
Published
Oct 7, 2016
Added
Dec 9, 2016
Modified
Apr 14, 2025

Description

Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.

Solution

debian-upgrade-xen
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.