CVE-2016-4480
Fixed in a distro release EPSS <1%
The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
Products: oracle vm_server, xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.8.0~rc3-1 |
| Debian 13 | xen | 4.8.0~rc3-1 |
| Debian 14 | xen | 4.8.0~rc3-1 |
| Debian 7 | xen | 4.1.6.lts1-1 |
| Debian 8 | xen | 4.4.1-9+deb8u6 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | xen | 4.2.5_21-27.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | xen | 4.1.6_08-29.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | xen | 4.2.5_21-27.1 |
| SUSE Linux Enterprise Server 12-LTSS | xen | 4.4.4_04-22.22.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 | xen | 4.4.4_04-22.22.2 |
| SUSE Manager 2.1 | xen | 4.2.5_21-27.1 |
| SUSE Manager Proxy 2.1 | xen | 4.2.5_21-27.1 |
| SUSE OpenStack Cloud 5 | xen | 4.2.5_21-27.1 |
| Ubuntu 14.04 LTS | xen | 4.4.2-0ubuntu0.14.04.6 |
| Ubuntu 16.04 LTS | xen | 4.6.0-1ubuntu4.1 |