CVE-2016-1571 | BDVDB-2026-74134 Detail

Description#

The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.debian.org/security/2016/dsa-3519
http://www.securitytracker.com/id/1034745
http://support.citrix.com/article/CTX205496
http://xenbits.xen.org/xsa/advisory-168.html

Exploit#

No public exploit known

History#

Version 12016-01-22Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.