The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-xen | Oct 30, 2017 | Aug 24, 2017 |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Sep 18, 2017 | Aug 23, 2017 |
| Debian | debian-upgrade-linux | Sep 25, 2017 | Aug 23, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-app-emulation-xengentoo-linux-upgrade-app-emulation-xen-tools | Jan 15, 2018 | Aug 24, 2017 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | Apr 16, 2020 | Aug 24, 2017 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | Dec 27, 2019 | Aug 24, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel-uek | Aug 24, 2017 | Aug 15, 2017 |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Aug 15, 2017 | |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Sep 7, 2017 | Aug 23, 2017 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-149-genericubuntu-upgrade-linux-image-3-13-0-149-generic-lpaeubuntu-upgrade-linux-image-3-13-0-149-lowlatencyubuntu-upgrade-linux-image-3-13-0-149-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-149-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-149-powerpc-smpubuntu-upgrade-linux-image-3-13-0-149-powerpc64-embubuntu-upgrade-linux-image-3-13-0-149-powerpc64-smpubuntu-upgrade-linux-image-4-4-0-1008-kvmubuntu-upgrade-linux-image-4-4-0-1032-gkeubuntu-upgrade-linux-image-4-4-0-1038-awsubuntu-upgrade-linux-image-4-4-0-1075-raspi2ubuntu-upgrade-linux-image-4-4-0-1077-snapdragonubuntu-upgrade-linux-image-4-4-0-97-genericubuntu-upgrade-linux-image-4-4-0-97-generic-lpaeubuntu-upgrade-linux-image-4-4-0-97-lowlatencyubuntu-upgrade-linux-image-4-4-0-97-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-97-powerpc-smpubuntu-upgrade-linux-image-4-4-0-97-powerpc64-embubuntu-upgrade-linux-image-4-4-0-97-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon | Oct 11, 2017 | Aug 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub