CVE-2016-1570 | BDVDB-2026-74133 Detail

Description#

The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.debian.org/security/2016/dsa-3519
http://www.securitytracker.com/id/1034744
http://xenbits.xen.org/xsa/advisory-167.html

Exploit#

No public exploit known

History#

Version 12016-01-22Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.