Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-7092

Fixed in a distro release EPSS <1%

The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.

Published 2016-09-21 · CVE record · OSV

Products: xen

Distro releases

ReleasePackageFixed in
Alpine 3.10xen4.7.0-r1
Alpine 3.11xen4.7.0-r1
Alpine 3.12xen4.7.0-r1
Alpine 3.13xen4.7.0-r1
Alpine 3.14xen4.7.0-r1
Alpine 3.15xen4.7.0-r1
Alpine 3.16xen4.7.0-r1
Alpine 3.17xen4.7.0-r1
Alpine 3.18xen4.7.0-r1
Alpine 3.19xen4.7.0-r1
Alpine 3.20xen4.7.0-r1
Alpine 3.21xen4.7.0-r1
Alpine 3.22xen4.7.0-r1
Alpine 3.23xen4.7.0-r1
Alpine 3.24xen4.7.0-r1
Alpine 3.4xen4.6.3-r2
Alpine 3.5xen4.7.0-r1
Alpine 3.6xen4.7.0-r1
Alpine 3.7xen4.7.0-r1
Alpine 3.8xen4.7.0-r1
Alpine 3.9xen4.7.0-r1
Debian 12xen4.8.0~rc3-1
Debian 13xen4.8.0~rc3-1
Debian 14xen4.8.0~rc3-1
Debian 7xen4.1.6.lts1-2
Debian 8xen4.4.1-9+deb8u7
SUSE Linux Enterprise Desktop 12 SP1xen4.5.3_10-20.1
SUSE Linux Enterprise Point of Sale 11 SP3xen4.2.5_21-27.1
SUSE Linux Enterprise Server 11 SP2-LTSSxen4.1.6_08-29.1
SUSE Linux Enterprise Server 11 SP3-LTSSxen4.2.5_21-27.1
SUSE Linux Enterprise Server 11 SP4xen4.4.4_08-40.2
SUSE Linux Enterprise Server 12 SP1xen4.5.3_10-20.1
SUSE Linux Enterprise Server 12-LTSSxen4.4.4_04-22.22.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4xen4.4.4_08-40.2
SUSE Linux Enterprise Server for SAP Applications 12xen4.4.4_04-22.22.2
SUSE Linux Enterprise Server for SAP Applications 12 SP1xen4.5.3_10-20.1
SUSE Linux Enterprise Software Development Kit 11 SP4xen4.4.4_08-40.2
SUSE Linux Enterprise Software Development Kit 12 SP1xen4.5.3_10-20.1
SUSE Manager 2.1xen4.2.5_21-27.1
SUSE Manager Proxy 2.1xen4.2.5_21-27.1
SUSE OpenStack Cloud 5xen4.2.5_21-27.1
Ubuntu 14.04 LTSxen4.4.2-0ubuntu0.14.04.7
Ubuntu 16.04 LTSxen4.6.0-1ubuntu4.2
openSUSE Tumbleweedxen4.7.0_12-1.3