Description
An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.
Metrics
CVSS 3.0 7.8/10
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
- http://www.securityfocus.com/bid/106182Third Party Advisory, VDB Entry
- https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/
- https://support.citrix.com/article/CTX239432Third Party Advisory
- https://www.debian.org/security/2019/dsa-4369Third Party Advisory
- https://xenbits.xen.org/xsa/advisory-275.htmlPatch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
- http://www.securityfocus.com/bid/106182Third Party Advisory, VDB Entry
- https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/
- https://support.citrix.com/article/CTX239432Third Party Advisory
- https://www.debian.org/security/2019/dsa-4369Third Party Advisory
- https://xenbits.xen.org/xsa/advisory-275.htmlPatch, Vendor Advisory
Timeline
- Published
- Dec 8, 2018
- Last modified
- Jun 17, 2026
- NVD status
- Modified