CVE-2016-7092 in Xen

Summary

The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 08/25/2016
• Disclosure: 09/21/2016
• Moderation: VulDB entry created
• Entries: VDB-91386 (1)
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 8.2
• EPSS: 0.00074
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-7092
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-7092
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-7092/