CVE-2017-12134
Fixed in a distro release EPSS <1%
The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.
Products: xen, citrix xenserver
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 4.12.12-1 |
| Debian 13 | linux | 4.12.12-1 |
| Debian 14 | linux | 4.12.12-1 |
| Debian 7 | linux | 3.2.93-1 |
| Debian 8 | linux | 3.16.43-2+deb8u5 |
| Debian 9 | linux | 4.9.30-2+deb9u5 |
| SUSE Linux Enterprise Desktop 12 SP2 | kernel-default | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | kernel-source | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | kernel-syms | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | kernel-default | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | kernel-source | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | kernel-syms | 4.4.92-6.18.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP2 | kernel-default | 4.4.90-92.45.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP3 | kernel-default | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Live Patching 12 | kgraft-patch-SLE12-SP2_Update_14 | 1-2.4 |
| SUSE Linux Enterprise Live Patching 12 SP3 | kgraft-patch-SLE12-SP3_Update_4 | 1-4.3 |
| SUSE Linux Enterprise Real Time 12 SP2 | kernel-rt | 4.4.88-18.1 |
| SUSE Linux Enterprise Real Time 12 SP2 | kernel-rt_debug | 4.4.88-18.1 |
| SUSE Linux Enterprise Real Time 12 SP2 | kernel-source-rt | 4.4.88-18.1 |
| SUSE Linux Enterprise Real Time 12 SP2 | kernel-syms-rt | 4.4.88-18.1 |
| SUSE Linux Enterprise Server 12 SP2 | kernel-default | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server 12 SP2 | kernel-source | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server 12 SP2 | kernel-syms | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server 12 SP3 | kernel-default | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Server 12 SP3 | kernel-source | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Server 12 SP3 | kernel-syms | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | kernel-default | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | kernel-source | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | kernel-syms | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-default | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-source | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-syms | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-default | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-source | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-syms | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | kernel-docs | 4.4.90-92.45.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | kernel-obs-build | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | kernel-docs | 4.4.92-6.18.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | kernel-obs-build | 4.4.92-6.18.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP2 | kernel-default | 4.4.90-92.45.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | kernel-default | 4.4.92-6.18.1 |
| Ubuntu 14.04 LTS | linux | 3.13.0-149.199 |
| Ubuntu 14.04 LTS | linux-lts-xenial | 4.4.0-97.120~14.04.1 |
| Ubuntu 16.04 LTS | linux | 4.4.0-97.120 |
| Ubuntu 16.04 LTS | linux-aws | 4.4.0-1038.47 |
| Ubuntu 16.04 LTS | linux-azure | 4.13.0-1005.7 |
| Ubuntu 16.04 LTS | linux-gcp | 4.13.0-1002.5 |
| Ubuntu 16.04 LTS | linux-gke | 4.4.0-1032.32 |
| Ubuntu 16.04 LTS | linux-hwe | 4.13.0-32.35~16.04.1 |
| Ubuntu 16.04 LTS | linux-kvm | 4.4.0-1008.13 |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1075.83 |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1077.82 |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |