CVE-2016-4480 | BDVDB-2026-75992 Detail

Description#

The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://www.securityfocus.com/bid/90710
http://www.securitytracker.com/id/1035901
http://www.debian.org/security/2016/dsa-3633
http://xenbits.xen.org/xsa/advisory-176.html

Exploit#

No public exploit known

History#

Version 12016-05-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.