Description
The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html ↗
- http://xenbits.xen.org/xsa/xsa185.patch ↗
- http://www.debian.org/security/2016/dsa-3663 ↗
- http://www.securityfocus.com/bid/92862 ↗
- http://support.citrix.com/article/CTX216071 ↗
- http://xenbits.xen.org/xsa/advisory-185.html ↗
- https://security.gentoo.org/glsa/201611-09 ↗
- http://www.securitytracker.com/id/1036751 ↗