CVE-2015-7835 in XenSource Xen
Résumé (Anglaise)
The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping.
Réserver
14/10/2015
Divulgation
30/10/2015
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 78957 | XenSource Xen Mapping mm.c mod_l2_entry élévation de privilèges | 20 | Non prouvée | Correctif officiel | CVE-2015-7835 |