CVE-2018-15468
Fixed in a distro release EPSS <1%
An issue was discovered in Xen through 4.11.x. The DEBUGCTL MSR contains several debugging features, some of which virtualise cleanly, but some do not. In particular, Branch Trace Store is not virtualised by the processor, and software has to be careful to configure it suitably not to lock up the core. As a result, it must only be available to fully trusted guests. Unfortunately, in the case that vPMU is disabled, all value checking was skipped, allowing the guest to choose any MSR_DEBUGCTL setting it likes. A malicious or buggy guest administrator (on Intel x86 HVM or PVH) can lock up the entire host, causing a Denial of Service.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | xen | 4.11.1-r0 |
| Alpine 3.11 | xen | 4.11.1-r0 |
| Alpine 3.12 | xen | 4.11.1-r0 |
| Alpine 3.13 | xen | 4.11.1-r0 |
| Alpine 3.14 | xen | 4.11.1-r0 |
| Alpine 3.15 | xen | 4.11.1-r0 |
| Alpine 3.16 | xen | 4.11.1-r0 |
| Alpine 3.17 | xen | 4.11.1-r0 |
| Alpine 3.18 | xen | 4.11.1-r0 |
| Alpine 3.19 | xen | 4.11.1-r0 |
| Alpine 3.20 | xen | 4.11.1-r0 |
| Alpine 3.21 | xen | 4.11.1-r0 |
| Alpine 3.22 | xen | 4.11.1-r0 |
| Alpine 3.23 | xen | 4.11.1-r0 |
| Alpine 3.24 | xen | 4.11.1-r0 |
| Alpine 3.6 | xen | 4.8.5-r0 |
| Alpine 3.7 | xen | 4.9.3-r0 |
| Alpine 3.8 | xen | 4.10.1-r3 |
| Alpine 3.9 | xen | 4.11.1-r0 |
| Debian 12 | xen | 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 |
| Debian 13 | xen | 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 |
| Debian 14 | xen | 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 |
| Debian 9 | xen | 4.8.4+xsa273+shim4.10.1+xsa273-1+deb9u10 |
| SUSE Enterprise Storage 4 | xen | 4.7.6_05-43.42.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | xen | 4.9.3_03-3.44.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | xen | 4.10.2_04-3.9.1 |
| SUSE Linux Enterprise Module for Server Applications 15 | xen | 4.10.2_04-3.9.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | xen | 4.7.6_05-43.42.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | xen | 4.7.6_05-43.42.1 |
| SUSE Linux Enterprise Server 12 SP3 | xen | 4.9.3_03-3.44.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | xen | 4.7.6_05-43.42.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | xen | 4.9.3_03-3.44.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | xen | 4.9.3_03-3.44.2 |
| SUSE OpenStack Cloud 7 | xen | 4.7.6_05-43.42.1 |
| Ubuntu 16.04 LTS | xen | no fix |
| Ubuntu 18.04 LTS | xen | no fix |
| openSUSE Tumbleweed | xen | 4.15.1_01-1.2 |