CVE-2016-3158 in Xen
Summary
The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when running on AMD64 processors, which allows local guest OS users to obtain sensitive register content information from another guest by leveraging pending exception and mask bits. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-2076.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
03/15/2016
Disclosure
04/13/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81555 | XenSource Xen access control | 284 | Not defined | Official fix | CVE-2016-3158 |