CVE-2016-1571 in Xen
Summary
The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/11/2016
Disclosure
01/22/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 80357 | XenSource Xen VMX Intercept code | 17 | Not defined | Official fix | CVE-2016-1571 |