Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-5242

Fixed in a distro release EPSS <1%

The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion.

Published 2016-06-07 · CVE record · OSV

Products: xen

Distro releases

ReleasePackageFixed in
Debian 12xen4.8.0~rc3-1
Debian 13xen4.8.0~rc3-1
Debian 14xen4.8.0~rc3-1
Debian 8xen4.4.1-9+deb8u6
Ubuntu 14.04 LTSxen4.4.2-0ubuntu0.14.04.6
Ubuntu 16.04 LTSxen4.6.0-1ubuntu4.1